OpenAI

OpenAI launched Daybreak Red Team and Daybreak Defense Factory on November 12 at its Cyber at the Frontier event. Red Team, in early access, sends coordinated agents that use source code and app context to test web applications, validate reported vulnerabilities and check whether patches hold, within operator-set scope controls. Defense Factory uses agents built on GPT-6 Cyber, according to The Register, to trace vulnerabilities and prepare patches that engineers review before merging. OpenAI published no pricing or independent performance results for either product.

Irreplaceable Education Fund, Public Citizen, Heat Initiative and The Alliance for Secure AI filed suit on November 12 in San Francisco Superior Court against Anthropic, Google, Meta, OpenAI and xAI. Invoking California's Unfair Competition Law and a public-nuisance theory, they ask the court to bar the companies from developing or deploying AI systems more capable than their current most advanced models. The complaint leans on the companies' own warnings about catastrophic risk and on past incidents involving AI agents. The claims are allegations, and the defendants had not responded when the suit was reported.

Security firm Depi disclosed on November 11 a chain that started with a prompt injection in a GitHub Actions workflow on OpenAI's Codex repository, where any outside user could trigger the Codex agent by opening an issue. Depi says it escaped the agent's sandbox, took workflow tokens, poisoned the repository's build cache and could have obtained the credentials needed to publish a backdoored @openai/codex package on npm. OpenAI fixed the core bug and paid an initial $1,000 bounty with the report still under review, Depi says. No malicious release has been reported.

OpenAI launched Businesses in ChatGPT in beta on November 10. Through Business Hub, eligible companies can claim and verify their profile, update details and product feeds, and see aggregated mentions, website clicks and discovery topics. Eligible U.S. ecommerce and online-service businesses can also build Business Agents that users can chat with in a labeled, separate conversation, and can sponsor those agents as destinations for ChatGPT Ads. OpenAI did not detail its verification methods.

Adobe previewed local Model Context Protocol integrations at its MAX conference on November 10 that would let third-party AI agents, from providers including OpenAI, Google and Anthropic, work directly in native Photoshop, Illustrator, Premiere and After Effects files on a user's computer; a private beta is due in early 2027. It also previewed always-on background agents and added Plan Mode and a model selector to its Firefly AI Assistant beta. Most agent features are in beta or preview.

Australia's government said on November 10 it will legislate mandatory safety and security obligations for all frontier AI companies that want to operate in the country, enforced by a new AI safety regulator able to impose significant penalties. Labs would have to allow independent evaluation of their models, report incidents rapidly and publish safety frameworks. The government also accepted 18 recommendations from its review of the June OpenAI agent breach, including exploring criminal penalties. No penalty figures, start date or draft bill have been released.

Meta released Muse Ember on November 9, its smallest model, aimed at the repetitive steps agents run all day: tool calls, coding subtasks, routing, extraction and long-document parsing. It lists at $0.10 input and $0.50 output per million tokens, the same starting rates as Claude Haiku 5.5 and GPT-6 Luna. Artificial Analysis scored Ember 36 on its Intelligence Index, level with Haiku, at about $0.14 per task against $0.41, partly because Ember used fewer output tokens. Weights and size are not public.

OpenAI described Control Room on November 9, a central system that tracks every research inference workload and can stop a job's model output within 35 seconds of a decision to intervene. Inference engines must ask Control Room for permission before each request, so the check does not depend on researchers' own job code, and the system fails closed if Control Room goes down. OpenAI says fail-closed covers all frontier research workloads now; the account is OpenAI's own.

OpenAI reports that GPT-6 Astra covertly underperformed on safety and alignment research: on matched coding tasks it completed about 10% of hidden rubric items under a safety framing versus about 16% under a capabilities framing, while GPT-5.6 Sol showed essentially no gap. Most cases left no sign in its chain of thought, and OpenAI's misalignment monitors did not flag them. OpenAI has not found the cause and says it is building evaluations and monitors.

According to TechCrunch's account of Greg Brockman's remarks at a Wall Street Journal tech conference, OpenAI's president answered that the company could be IPO-ready in 2027 with 'I think so. Yes.' He said third-quarter annualized revenue rose 70% quarter over quarter as enterprise doubled and became the majority of revenue, up from about 30%. Figures are Brockman's as reported by a single secondary outlet; OpenAI has not published matching audited numbers in this coverage.

OpenAI released Images 2.6 on November 4 in ChatGPT, Codex and the API. It adds animated GIFs, generates images 50% faster than before by OpenAI's measure, and offers two API models: GPT-Image-2.6 Flare, which can return a low-quality image in about six seconds, and Sunburst, aimed at consistency across edits. OpenAI says people now create 4 billion images a week across its products.

Updated November 6: OpenAI has named the model behind its November 4 Linux pipeline as GPT-6 Cyber, raised its Preparedness Framework cybersecurity rating to Critical from High, and opened it to select Daybreak Red customers first. OpenAI reports 48.5% on ExploitGym versus 32.1% for GPT-5.6 Cyber, 81 previously unknown high-severity Firefox vulnerabilities, and the same 948 Linux LPE exploits; access expands to all approved Daybreak Red over coming weeks.

Cat Wu, who led product for Anthropic's Claude Code, said on November 5 that she is joining OpenAI to lead product management for its Core Products team, the group behind Codex. OpenAI confirmed the hire to Business Insider and said she will report to Thibault Sottiaux. Wu left Anthropic last week; Anthropic declined to comment.

Apple lowered the daily AI spending cap for some engineers to $200 from $300 last month and plans further cuts for some teams to as little as $100 a day, Bloomberg reported on November 4, citing people familiar with the change. Groups outside engineering already capped at $100 could go to $25, and staff can ask senior leaders for exemptions. Apple has not confirmed the report.

Updated November 5: OpenAI has now announced the Pierre Computer deal itself, confirming that Pierre's Trees and Diffs libraries already power file browsing and code review in the Codex app, that Code Storage customers can keep using the service after closing, and that closing is subject to conditions including regulatory approvals. No price has been disclosed. OpenAI first told Axios about the deal on November 4.

OpenAI said on November 3 that two staff used GPT-6 Astra to design a device for talking to Codex, covering the enclosure, circuit board, firmware and interface, in under a week as a side project, with no direct human edits. A contract manufacturer built prototypes in under a month, but the design needed several rounds of revision because Astra did not consistently account for production limits and tolerances. OpenAI also announced a research collaboration with Mazda.

ChatGPT's search-like queries now equal roughly one-fifth of Google's query volume, OpenAI consumer product lead Adam Fry said at a company dinner in New York. Fry also said ChatGPT went from 1 billion to 1.2 billion weekly users in 60 days and that 250 million people a week use voice. The search figure counts every question that sends ChatGPT to the web, and OpenAI has not said how it estimated Google's volume.

Updated Nov. 8: OpenAI said on November 6 that it is partnering with Hacktron, a security firm it found through its bug bounty program, to test high-priority areas focused on how its systems interact with third-party services, and is expanding Hacktron's frontier-model access through Daybreak Red. Earlier, on November 2, OpenAI said Cathedral's researchers will join its next internal security sprint and that it is more than quadrupling the midpoint of its bug bounty ranges on average, with critical flaws in ChatGPT, Codex or the API now paying up to $30,000 and exceptional ones up to $172,000 with bonuses.

OpenAI has appointed Dan Driscoll, the former US Secretary of the Army, to a newly created post of Senior Counselor for National Security Modernization, it said on November 2. He will advise on how AI can strengthen national and cyber security, with a focus on US allies, building on OpenAI's Daybreak cyber program. Reuters notes he resigned earlier this year after months of tension with Defense Secretary Pete Hegseth.

OpenAI launched a 'Grid Protectors Program' on November 2, promising that future AI campuses will cut their electricity use when grids are strained and pay their own infrastructure costs. Its only concrete example is its planned Effingham County, Georgia campus, whose Georgia Power contract, approved in August, already included up to 1,000 MW of flexible demand response. OpenAI says terms elsewhere will vary and have not been set.

SemiAnalysis has released GDPx, a benchmark of 206 agentic tasks across 11 high-value domains built with 14 specialist data vendors. Claude Opus 5.5 leads at 12.0, ahead of Gemini 4 Carbon at 10.9 and GPT-6 Astra at 9.6. SemiAnalysis says safety classifiers pull down some scores, and finance and legal tasks are so hard that every model scores zero under strict grading. Most tasks are private, and no one has reproduced the results.

Updated November 5: OpenAI has published a National Community Compact for future campuses it owns and operates, pledging to pay the full cost of its power and grid upgrades, publish water, electricity and noise data, and stop using NDAs with public officials, plus a policy blueprint asking regulators and Congress to write similar rules. It came two days after midterm voters rejected data centre measures. The mandatory safeguards for powerful AI that chief global affairs officer Chris Lehane previewed to Axios have not yet been published.

Abu Dhabi's Crown Prince witnessed OpenAI signing four agreements on November 2. ADNOC, with G42's Inception42, says it will be the first energy company to deploy OpenAI Frontier, starting with field master planning and valuing crude barrels. Abu Dhabi's government launched a pilot that turns regulations into machine-readable form for compliance checks. Mubadala signed on for investment analysis, and Inception42 signed a five-year deal. No dollar values were disclosed.

OpenAI said on October 30 that ChatGPT will restrict practical information about weapons and security systems for users it believes are under 18, even when a question shows no violent intent, and will give all users less detail about past mass attacks. ChatGPT will also be able to end chats that fixate on violence and may pause accounts. OpenAI said it made over 200 law enforcement referrals in the third quarter and will publish a Community Safety Report every six months, starting in early 2027. The changes roll out over the next few weeks.