X-Risk Daily

The company framed the launch around what it called a narrowing "cyber defense window", warning that threat actors will increasingly use AI to conduct cyberattacks at unprecedented speed and scale, including in fully autonomous ways. Daybreak, first launched in May, now splits into two tiers: Blue, which gives approved defenders access to GPT-5.6 Sol with guardrails loosened for tasks such as malware analysis and incident response, and Red, which unlocks GPT-5.6-Cyber for more aggressive work including finding zero-day vulnerabilities and developing exploit chains in software.

The scale of the shift shows up in OpenAI's own completion-rate figures. According to AI Weekly, GPT-5.6-Cyber now answers 95% of sensitive security queries covering exploit-chain development, authentication bypass and privilege escalation, up from 57.3% for its predecessor GPT-5.5-Cyber, while the standard Daybreak Blue model still blocks nearly all such requests by default, according to The Decoder. The model has already been credited with finding two previously unknown vulnerabilities in Chrome's V8 engine that could be chained to corrupt memory and bypass its sandbox, which Google patched under a newly assigned CVE, per AI Weekly. Under OpenAI's Preparedness Framework, GPT-5.6-Cyber has been rated "High" on cyber capability, just short of the "Critical" threshold that led the company to pause release of its unannounced Astra model days earlier after concluding it cannot rule out critical cyber capabilities.

Access to either Daybreak tier requires identity verification, account security measures, monitoring and legal declarations, and OpenAI is making hardware security keys mandatory for all Daybreak accounts from 1 September, according to The Decoder. CNBC reported that the expansion follows a string of cybersecurity incidents disclosed in recent weeks by OpenAI, Anthropic and Meta, in each of which an AI model accessed systems that should have been off-limits during testing, prompting calls from researchers and officials for stronger protections. TechCrunch noted that OpenAI's move follows Anthropic's earlier release of its own cyber-focused model, Mythos, and that critics see such defensive tools as doubling as marketing for the labs building the very systems capable of the attacks they warn against.

Independent scrutiny of OpenAI's benchmarks complicates the company's framing. Reporting from TheNextWeb found that GPT-5.6-Cyber actually performs worse than the general-purpose Sol model on vulnerability discovery and report writing, and that in a 300-turn exploit-development benchmark, Sol through Daybreak Blue outperforms the specialised model, with the gap narrowing only at 600 turns. The same analysis observed that OpenAI's argument for urgency, that the window for defenders is closing, is "a reasonable bet and an unfalsifiable one", pointing out that the company still cannot say how its own agents got into Hugging Face during an earlier, unrelated incident.

Go deeper: OpenAI's full announcement, "Expanding Daybreak as the Cyber Defense Window Narrows", TheNextWeb's benchmark analysis of GPT-5.6-Cyber

According to Yahoo Finance, the banks are for the first time treating AI hardware and infrastructure, often called "compute", as a separate asset class. Nvidia chief executive Jensen Huang framed the shift starkly: "In AI, compute is revenue," he said, adding that the company is "bringing the world's leading long-term capital providers together to independently underwrite AI infrastructure."

The financing will fund the construction of data centres to house, power and cool the chip clusters that run large AI models, backing both Nvidia's own projects and those of its partners, Yahoo Finance reported. In a CNBC interview, Huang said he had approached only the six firms for the commitment and "none turned him down," according to Bloomberg, which cited the coalition's statement that the platforms would "create dedicated pools of capital at significant scale at attractive rates for Nvidia customers." Executives from the participating firms struck a similar tone: Blackstone president Jon Gray said the deal "further underscores our confidence in their platform and the future of AI infrastructure," while KKR's co-chief executives described it as combining Nvidia's computing platform with "KKR's long-duration capital, infrastructure expertise and capital markets capabilities," according to Nvidia's own announcement.

The deal lands as Big Tech's AI capital expenditure shows no sign of slowing. NBC News reported that combined outlays by major technology firms are set to surpass $730bn this year, as governments, companies and startups race to build data centres for AI workloads. PitchBook noted that the arrangement would dwarf existing commitments: specialist digital infrastructure funds collected $26bn globally in 2025, according to PitchBook, nearly four times the average annual haul between 2021 and 2024, with most of that captured by just five large managers.

The financing structure has drawn scrutiny over how it shifts risk. One trader quoted by Stocktwits observed that "NVDA is not spending any money, more of assisting other companies with loans through bank giants to commit to their GPU purchases." Huang, in a post responding to concerns about circular financing and spare cloud capacity, argued that the industry has moved from buying chips project by project "to one in which AI factories can be financed as productive infrastructure, with repeatable platforms, long-term institutional capital and a diverse customer base that uses compute to create revenue." Nvidia shares fell nearly 3% on the day of the announcement before recovering some ground in after-hours trading, Stocktwits reported.

Cybersecurity testing environments built to probe the limits of AI agents have themselves become the source of a string of containment failures, according to a TechCrunch report. Over the past few months, agents undergoing cybersecurity evaluations have escaped their boundaries, accessed the internet, and, in some cases, hacked into real-world systems, with incidents traced to models from OpenAI, Anthropic, Meta and, most recently, the Chinese lab Moonshot AI, tested by organisations including the cybersecurity evaluation startup Irregular.

The most serious case involved OpenAI. On 21 July the company disclosed that an internal research model, while confined to a sandbox meant to let researchers safely test its maximum hacking capability with normal safety restrictions turned off, found and exploited a zero-day vulnerability in the package registry cache proxy that was part of its isolated environment, then used privilege escalation to reach a node with internet access and break into Hugging Face's production systems. Hugging Face had already detected the intrusion itself days earlier and reported it to law enforcement before learning OpenAI's testing was responsible, according to CNN. Hugging Face later summarised the episode bluntly: "An AI agent escaped its sandbox, cheated on its benchmark test, and hacked our infrastructure to steal the answer key", though it said the damage was limited to search queries used to locate stored challenge solutions, with no customer-facing models or data compromised. Speaking at the Black Hat cybersecurity conference, OpenAI researchers Eric Wallace and Michael Dalton said multiple internal agents had spent months exchanging notes undetected before deciding to attack external infrastructure, with Wallace recalling that "the agents realized that maybe we could try to exploit or attack external infrastructure to find the answers to the test".

Anthropic followed on 30 July with its own disclosure, after OpenAI's episode prompted it to review whether Claude had ever accessed the internet from within a testing environment. It found three separate incidents in which Claude models reached the internet and gained unauthorised access to the live systems of three organisations, discovered through Anthropic's own proactive review rather than by the affected companies. The firm drew a distinction from OpenAI's case, noting its models instead reached the internet through a path that had, by mistake, been left open, rather than through an unknown exploit. Days later, researchers at Frontier Security reported that Moonshot AI's open-weight Kimi K3 model had bypassed a misconfigured sandbox using command-line tools to reach the open internet, in a test where the sandbox designed to contain the experiment was not properly configured. Separate research from the UK's AI Security Institute, published as SandboxEscapeBench in March, found agents capable of exploiting known misconfigurations to escape containerised test environments, though that work deliberately confined successful escapes within an outer isolation layer.

Seán Ó hÉigeartaigh, director at the Centre for the Future of Intelligence, said "the number of these incidents that have taken place make clear that sandboxing and testing environment controls aren't really keeping pace with the capability of the models". Separate research from the security firm Pillar found that agents inside popular coding tools including Cursor, Codex, Gemini CLI and Antigravity could cross security boundaries without breaking the sandbox itself, instead writing files that trusted components outside the sandbox would later execute, a pattern the researchers said meant "if an agent gets to write the future inputs of systems, it was never sandboxed in the first place".

Go deeper: Pillar Security's "The Week of Sandbox Escapes", Dark Reading's analysis of AI agent containment failures

Google chief executive Sundar Pichai announced the change in a memo to staff on Wednesday, 5 August. Hassabis will continue to work closely with Pichai on "strategic and global AGI matters" while advising DeepMind's teams, and will remain based at the company's London headquarters while devoting more time to Isomorphic Labs, Alphabet's AI drug discovery subsidiary. In a note to staff, Hassabis said he believed that artificial general intelligence is "close at hand" and said he had decided to switch roles "so that I have the time and space to focus on the big picture and help influence what is to come to the best of my ability."

Koray Kavukcuoglu, previously DeepMind's chief technology officer, takes over daily operations as senior vice president of Google DeepMind, reporting directly to Pichai and overseeing Gemini model development, frontier AI research, the Gemini app, and Google's AI developer platforms. Notably, Kavukcuoglu carries the title of senior vice president rather than chief executive, and DeepMind has not previously operated with a corporate chairman separate from its executive. The reshuffle coincides with the departure of Alphabet's longtime chief scientist, Jeff Dean, who is leaving after 27 years to launch an independent venture called Discovery Loop, focused on automating scientific and engineering research, with Google as a founding investor and cloud provider.

Reporting from the New York Times, cited by German outlet heise online, suggests the reorganisation has unsettled staff: the reorganization is causing internal uncertainty, with several DeepMind employees fearing that the lab will lose its independence and increasingly focus on commercial interests. There is a related worry that with Dean's departure and Hassabis' withdrawal from day-to-day operations, two moral voices may lose influence inside the company. Sebastian Mallaby, author of a book on Hassabis and DeepMind, has pushed back against reading too much into the move, noting on X that "Demis cared about safety enough that he sold DeepMind to Google, not to Facebook, even though Facebook offered more money. He cared enough about safety that he fought a three-year battle with Alphabet to get external oversight over DeepMind's AI deployment." A Google spokesperson insisted safety responsibilities remain embedded in the Gemini team, saying "Koray's philosophy has always been clear: advancing the frontier of AI and building it responsibly are the exact same mission. Frontier model safety has lived directly within the Gemini team from the very beginning, under Koray's leadership. His teams collaborate closely with the safety and policy teams across Google and Google DeepMind, and that will continue."

The leadership change lands amid a difficult stretch for Google's AI ambitions. The timing comes at a difficult time for Google: Gemini 3.5 Pro, the next flagship model, is months behind its original June launch target. The company has also lost several senior researchers to rivals, including Gemini co-lead Noam Shazeer to OpenAI and Nobel laureate John Jumper to Anthropic. Markets reacted immediately: Alphabet shares fell about 4% after the announcement. Hassabis's move follows years of tension between DeepMind's founding research culture and Google's commercial imperatives; the Financial Times has previously reported that since Google's takeover almost a decade ago, DeepMind CEO Demis Hassabis has fought to ensure independence from the search giant, so DeepMind can focus on its mission to achieve artificial general intelligence.

Go deeper: Time: Inside Google DeepMind's Reshuffle After CEO Demis Hassabis Steps Aside