GPT-5.6-Cyber is a new cybersecurity-specific model designed to enhance advanced cyber capabilities. The model aims to equip defenders with frontier intelligence to counteract the growing threat of AI-driven cyberattacks.

MAI-Cyber-1-Flash is integrated into MDASH, providing multi-agent vulnerability identification and remediation. This solution delivers performance at 50% of the cost of leading models.

Y Combinator was scoring over 100,000 founders globally through Paxel, which had a vulnerability allowing score forgery due to an unvalidated HMAC. After disclosing the issue, Y Combinator quickly patched it and invited the hacker to attend Startup School in San Francisco.

OpenSSH 10.4 and 10.4p1 have been released, featuring various bug fixes and improvements. Notable changes include enhancements to the portability of the code and updates to the SSH protocol.

Daybreak is being expanded to democratize the patching of vulnerable software quickly. The initiative includes updates to the Codex Security plugin, which integrates learnings from internal and customer usage to enhance security measures across major browsers, network infrastructure, and operating systems like FreeBSD and the Linux kernel.

Blue41 assisted Bunq in securing its AI assistant from spearphishing risks by identifying an indirect prompt injection vulnerability that could exploit a bank transfer to facilitate phishing attacks. This vulnerability is indicative of a broader architectural issue affecting multiple banks.

RootsShell is a platform designed for security professionals to share and discuss vulnerabilities, exploits, and security research. It includes community-driven content with user-generated posts and comments to facilitate knowledge exchange.

Claude Code Security is a new capability in Claude Code that scans codebases for security vulnerabilities and suggests targeted software patches for human review. It aims to assist security teams in addressing the overwhelming number of software vulnerabilities.

1Password has open-sourced a benchmark called the Security Comprehension and Awareness Measure (SCAM) to address the risk of AI agents leaking credentials. SCAM evaluates the ability of AI models to identify phishing threats while operating as autonomous agents with access to sensitive tools.