OpenAI launches new tools to help fix software vulnerabilities
What's the story
OpenAI has launched two new artificial intelligence (AI)-powered security tools, Daybreak Red Team and Daybreak Defense Factory. The launch is part of its Daybreak security platform. The primary goal of these tools is to help businesses identify and fix software vulnerabilities before they can be exploited by hackers. This comes amid rising concerns over AI-enabled cyberattacks, where malicious actors could use advanced AI tools to find software weaknesses and automate attacks.
Tool functionality
Daybreak Red Team tests web applications for security vulnerabilities
OpenAI's new tools leverage AI agents to probe applications for security weaknesses, investigate potential vulnerabilities, and assist developers in preparing fixes before hackers can exploit them.
The first tool, Daybreak Red Team, is specifically designed to test web applications for security vulnerabilities.
It employs a coordinated team of AI agents that analyze an application's source code and context to explore possible attack vectors.
Automated testing
Tool works like an automated penetration-testing team
Daybreak Red Team works like an automated penetration-testing team. It allows businesses to simulate potential attacks and identify security gaps themselves, rather than waiting for hackers to discover a weakness.
The tool can also examine findings from existing code scanners, bug bounty programs, and vulnerability reports to check the authenticity of reported weaknesses.
Once a company fixes an issue, Red Team can retest the application to see if the patch actually prevents the attack.
Patch preparation
Daybreak Defense Factory focuses on fixing vulnerabilities
The second tool, Daybreak Defense Factory, focuses on fixing vulnerabilities discovered by security teams.
It employs AI agents to examine a company's code, trace the source of a security weakness, and prepare a patch for developers to review.
For example, if a security scan identifies an application weakness, Defense Factory can investigate the issue and suggest a code change to fix it.