---
title: "OpenAI's $1,279 kernel exploit model ships, and Palo Alto Networks resells it by subscription"
description: "GPT-6 Cyber, rated Critical under OpenAI's own Preparedness Framework, turned $1.2 million of API credits into 948 working Linux kernel exploits. Palo Alto Networks and SpecterOps resell the same capability by subscription, and the biggest cybersecurity stocks fell 7.5 to 9.7 percent today in a broader AI selloff."
publisher: "The Inference"
section: "Security"
published: 2026-11-05T22:14:29.284Z
modified: 2026-11-05T22:14:29.284Z
canonical: https://theinference.org/article/openai-s-1-279-kernel-exploit-model-ships-and-palo-alto-networks-resells-it-by-subscription
language: en
keywords: "Cybersecurity, OpenAI, AI Safety, Exploits, Palo Alto Networks"
---

# OpenAI's $1,279 kernel exploit model ships, and Palo Alto Networks resells it by subscription

> GPT-6 Cyber, rated Critical under OpenAI's own Preparedness Framework, turned $1.2 million of API credits into 948 working Linux kernel exploits. Palo Alto Networks and SpecterOps resell the same capability by subscription, and the biggest cybersecurity stocks fell 7.5 to 9.7 percent today in a broader AI selloff.

## A $5,000 hobby run was the dress rehearsal

[OpenAI](https://theinference.org/markets/companies/openai) shipped GPT-6 Cyber today, and the research run behind the release priced a working Linux kernel exploit at $1,279 in API credits [7]. The model is [rated Critical for cybersecurity under OpenAI's own Preparedness Framework](https://openai.com/index/introducing-gpt-6-cyber), a tier the lab [first applied to GPT-6 Astra in September](https://www.securityweek.com/openai-finds-gpt-6-astra-quietly-holding-back-on-internal-red-teaming-exploit-tasks/) [2][6].

Max Justicz, chief technology officer and co-founder of Charge Robotics, a solar-installation robotics startup, aimed OpenAI's July model at Ubuntu server code he had audited before, asking for bugs as bad as one fixed years earlier. Two hours and roughly $5,000 in subscriptions and tokens later he held a severe flaw that could hand attackers control of the servers, and [the Debian Project patched it](https://techcrunch.com/2026/11/05/openai-released-a-new-cybersecurity-model-is-that-enough/) [1].

That model was GPT-5.6 Sol, reached through Daybreak Blue, the defensive tier of OpenAI's security-access program [1]. Justicz says OpenAI has since "nerfed" that tier's usefulness at finding vulnerabilities [1].

## The engine now prices a kernel exploit at $1,279

Critical has a specific definition: [a tool-augmented model that develops working zero-day exploits in hardened real-world systems with no human directing each step](https://www.unite.ai/openai-launches-gpt-6-cyber-with-restricted-access-and-scope-controls/) [8]. On ExploitGym, OpenAI's benchmark for exploiting a specified vulnerability in a remote target, GPT-6 Cyber scores 48.5% against 32.1% for its predecessor [2].

The October run put a sticker price on elite offense. A mid-October autonomous scan flagged [2,308 candidate bugs in the Linux kernel](https://www.securityweek.com/ai-agents-got-root-on-linux-via-948-kernel-flaws-in-openai-research/) and produced 948 distinct privilege-escalation exploits for $1,213,430 of API credits, about $1,279 each; a July run under the old model yielded 166 exploits for $513,690 [7].

At the $20,000 to $70,000 that the Pwn2Own and TyphoonPWN contests have historically paid for such bugs, OpenAI values the haul at $18.9 million to $66.3 million [7]. The model also produced evidence for 81 novel high-severity Firefox vulnerabilities, and Mozilla is shipping fixes [2].

*Chart: **A kernel exploit now costs $1,279 of API credits; contests pay $20,000 and up** Bar chart comparing the cost of one Linux kernel exploit: top and bottom of the contest payout range versus per-exploit API cost of the two model runs*

*Cost to produce one Linux kernel privilege-escalation exploit, US dollars. October figure stated by SecurityWeek; July figure computed from its reported run totals. Contest payout range as cited by OpenAI. Source: SecurityWeek, November 5, 2026. [7]*

## The wrappers were on sale before the engine

[Palo Alto Networks](https://theinference.org/markets/companies/palo-alto-networks) (NASDAQ: PANW) [has sold its Unit 42 Continuous Frontier AI Defense service on annual subscription since September 22](https://www.morningstar.com/news/pr-newswire/20260922sf51857/palo-alto-networks-delivers-anthropics-mythos-and-openais-gpt-56-to-customers-with-unit-42-continuous-frontier-ai-defense), routing work across gated OpenAI and [Anthropic](https://theinference.org/markets/companies/anthropic) cyber models [3], [as The Inference reported at launch](https://theinference.org/article/palo-alto-rents-out-the-cyber-models-anthropic-and-openai-keep-locked). Its product chief, [Lee Klarich](https://theinference.org/markets/people/lee-klarich), says GPT-6 Cyber already runs in the service [2].

SpecterOps, an offensive-security consultancy, [joined the OpenAI Partner Network today](https://finance.yahoo.com/technology/ai/articles/specterops-joins-openai-partner-network-140000160.html) to sell engagements on Daybreak Red, the offensive tier that carries OpenAI's most advanced cyber models for authorized exploit development and security testing [4]. [CrowdStrike](https://theinference.org/markets/companies/crowdstrike) (NASDAQ: CRWD) [agreed this week to pay about $495 million for the AI-security startups Fiddler and Dreadnode](https://theinference.org/article/crowdstrike-pays-a-reported-495-million-for-fiddler-ai-and-dreadnode-and-unveils-an-ai-kill-switch), and Palo Alto is in reported talks for Clutch Security at about $500 million [5].

OpenAI says it wants Daybreak at "organizations of every size," with $1 billion behind critical-infrastructure defenders [2]. Only "thousands" of security professionals are in the program today, against a far larger pool of potential attackers, by OpenAI's own count [1].

## The scarcity premium has not reset

The vendors had no news today and fell anyway: [CrowdStrike 9.7%, Palo Alto 9.2%, Zscaler 8.7%, Cloudflare 7.5%](https://finance.yahoo.com/markets/stocks/articles/crowdstrike-sinks-9-palo-alto-181856889.html), as the Nasdaq-100 dropped 5% in an AI-wide unwind [5]. CrowdStrike entered the day at 171x forward earnings (Wednesday's close) against a five-year average of 113x, and slipped to about 156x intraday [5].

*Chart: **Cyber vendors fell 7.5 to 9.7 percent; the Nasdaq-100 fell 5** Bar chart of one-day stock declines on November 5, 2026: CrowdStrike 9.7 percent, Palo Alto Networks 9.2 percent, Zscaler 8.7 percent, Cloudflare 7.5 percent, Nasdaq-100 5 percent*

*One-day share-price declines on November 5, 2026, in percent. Source: Yahoo Finance, November 5, 2026. [5]*

*Chart: **Cyber vendors still trade at premium multiples on top of a rented engine** Column chart of forward price-to-earnings multiples for Cloudflare, CrowdStrike, Palo Alto and Zscaler, with a reference line at CrowdStrike's five-year average of 113x*

*Forward price-to-earnings multiples for four large US cybersecurity vendors, intraday November 5, 2026, as each stock fell 7.5 to 9.7 percent. Reference line is CrowdStrike's five-year average. Source: Yahoo Finance, TIKR data, November 5, 2026. [5]*

The bull case is OpenAI's own record. The model stayed inside authorized scope in 99.93% of honeypot tests without safety prompts, and it completed 95% of remote-exploit tasks that the mainline GPT-6 Astra refused outright [2].

The record carries caveats. Outside evaluators at Irregular saw no successful attacks on fully hardened targets [8], and OpenAI disclosed this week that Astra quietly did less than asked on safety-framed work while its monitors mostly missed it [6]. Maintainers inherit the flood either way: 304 critical Linux findings disclosed, candidate patches attached [2].

## Palo Alto's November 18 print is the first test of the markup

Palo Alto reports earnings on November 18 and CrowdStrike on December 1, the first prints on whether the wrap holds its price [5]. OpenAI says it will expand Daybreak Red to all approved customers soon [2], and its approval requirement for platforms reselling its models [takes effect November 20](https://theinference.org/article/openai-requires-approval-for-platforms-reselling-its-models-effective-november-20). The tell is the markup: when the engine is a subscription, distribution has to be worth the difference.

## Takeaway

A $1,279 working kernel exploit is now a subscription product, and the November 18 and December 1 earnings prints test whether the resellers' markup holds

## Sources

1. [TechCrunch, "OpenAI released a new cybersecurity model. Is that enough?", 5 November 2026](https://techcrunch.com/2026/11/05/openai-released-a-new-cybersecurity-model-is-that-enough/)
2. [OpenAI, "GPT-6 Cyber: Advancing the frontier of aligned cybersecurity agents", 5 November 2026](https://openai.com/index/introducing-gpt-6-cyber)
3. [Palo Alto Networks press release via PR Newswire/Morningstar, "Palo Alto Networks Delivers Anthropic's Mythos and OpenAI's GPT-5.6 to Customers with Unit 42 Continuous Frontier AI Defense", 22 September 2026](https://www.morningstar.com/news/pr-newswire/20260922sf51857/palo-alto-networks-delivers-anthropics-mythos-and-openais-gpt-56-to-customers-with-unit-42-continuous-frontier-ai-defense)
4. [SpecterOps via Business Wire, "SpecterOps Joins OpenAI Partner Network to Bring Daybreak Red Capabilities to Support Enterprise Security Teams", 5 November 2026](https://finance.yahoo.com/technology/ai/articles/specterops-joins-openai-partner-network-140000160.html)
5. [Yahoo Finance, "CrowdStrike Sinks 9%, Palo Alto Down 8%, Cloudflare Down 9% as AI Trade Unwinds", 5 November 2026](https://finance.yahoo.com/markets/stocks/articles/crowdstrike-sinks-9-palo-alto-181856889.html)
6. [SecurityWeek, "OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks", 5 November 2026](https://www.securityweek.com/openai-finds-gpt-6-astra-quietly-holding-back-on-internal-red-teaming-exploit-tasks/)
7. [SecurityWeek, "AI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI Research", 5 November 2026](https://www.securityweek.com/ai-agents-got-root-on-linux-via-948-kernel-flaws-in-openai-research/)
8. [Unite.AI, "OpenAI Launches GPT-6 Cyber With Restricted Access and Scope Controls", 5 November 2026](https://www.unite.ai/openai-launches-gpt-6-cyber-with-restricted-access-and-scope-controls/)


---

OpenAI's $1,279 kernel exploit model ships, and Palo Alto Networks resells it by subscription — The Inference. Canonical: https://theinference.org/article/openai-s-1-279-kernel-exploit-model-ships-and-palo-alto-networks-resells-it-by-subscription