OpenAI has recently been reported to be in early discussions to acquire the renowned security firm Trail of Bits, aiming to make AI security a core competitive advantage. Although neither party has made any public statement, the deal, if finalized, could be valued at hundreds of millions of dollars. The two companies have been deeply collaborating since this summer.
They launched a security initiative called Daybreak, which includes the Patch the Planet project. Engineers are using an unreleased GPT-5.5 cybersecurity model integrated with Codex tools to scan open-source software globally for vulnerabilities, generate patches, and directly submit them to maintainers for merging. This full-time team has thoroughly investigated 19 critical open-source infrastructure projects—including Python, Go, and cURL—identifying hundreds of security vulnerabilities and submitting dozens of code patches.
Previously, OpenAI also invested $1 billion in cybersecurity defenses for water systems and community banks. The competition among large models has long moved beyond writing limericks. OpenAI is now clearly leveraging its most advanced model capabilities to fully automate vulnerability detection and patch generation—a combination that is poised to disrupt traditional approaches in the cybersecurity landscape.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
