OpenAI spent $1.2 million hacking Linux... and it was a bargain Transcript, AI Summary & Key Points

00:00 At the end of October, Anthropic showed a terrifying unreleased claude model to the world that went from a single kernel memory leak to remote access on a Linux server in just 53 minutes. OpenAI saw this and said, "Hold my beer." Because just a few days ago, they published some new research called a thousand fewer paths to root where they used a swarm of agents to tear through the latest Linux kernel master branch, which resulted in 948 unique root exploits.

00:22 But at least they were nice enough to attach a patch for each one of them. Now, I used to think Lionus Torvalds, the guy who created Linux, was a good programmer, but now I'm not so sure. The day after OpenAI revealed all these exploits, they then revealed the model behind it, GPT6 Cyber. It's a model that's far too powerful for most of you default setting humans watching this video.

00:42 But in today's video, we'll take a look at how unneutered cyber security models like this can discover hundreds of unknown exploits in bulletproof software and what that means for the future of software development. It is November 9th, 2026, and you're watching the code report. To understand the full power of GPT6 Cyber, we first need to understand what an LPE is or local privilege escalation.

01:03 When you run a Linux server, you typically have a lowprivilege foothold on the machine, and that's by design to only allow you to do the job you're supposed to do and not do things like RM RF on the root directory that could burn your entire server to the ground. The problem with Linux permissions and Windows and every other OS is that under the hood, they're just ones and zeros.

01:21 And if you can flip the right zeros to ones, you go from random user to God user. The only operating system that doesn't have this problem is Temple OS because there you operate at ring zero by default right next to God. Now that we know that, let's take a look at the actual pipeline OpenAI uses to find 948 unique route exploits in the Linux kernel.

01:39 The first soldier in their agent swarm is the scout, and its job is to carve the colonel down into code an unprivileged user can actually reach, which resulted in about 5,000 audit targets, or roughly 7% of the total kernel. Then the second agent was the analyst, which would scan those audit targets, and after about 12 hours of working, it slopped out 2,38 candidate bugs while burning through $316,000 worth of tokens.

02:04 Then that brings us to the third step, the triage agent. and its job is to reproduce every one of these bugs in an isolated VM and find out if they're legit with the colonel memory checker. After this agent ran for another 30 hours, 1,724 of the bugs were the majority of them were confirmed real. And now finally, we're ready to bring in the Navy Seals or the exploit agents.

02:24 And their job is to try and weaponize these exploits on a stock desktop dro like maybe Arch by the way, but with kernel address space layout randomization and supervisor mode execution protection turned on, which in theory should make the operating system extremely difficult to hack into. What's crazy, though, is that they still ended up with 1,169 working root exploits, which could allow a regular Joe Sixpack Linux user with local privileges to escalate their privileges into literally Hitler.

02:49 Hitler is bad, but the silver lining is that it cost OpenAI $1,213,000 to achieve this, or about $1,280 per exploit. Actually, wait a minute. That's not a silver lining at all. Own to Own has historically paid around $20,000 for just one Linux LP. So, if we do the math here, that means OpenAI's little project is worth around $50 million on the bounty market.

03:13 But the scariest thing in cyber security right now is the delta that things are changing faster than we can keep up with. If we go back to late July, an earlier run with GPT 5.6 Soul found 166 LPEs for about $3,100 each. That was terrifying at the time, but now 3 months later, after a bunch of patches and kernel hardening, this model found five times as many for half the price.

03:36 And it's starting to use exploitation techniques that outside experts don't even recognize. Like when the model sprayed persistent elastic objects into the kernel cache. I don't even know what that means, but it sounds gross. For safety reasons, they didn't release any technical details. And the only practical advice OpenAI gives is to keep your Linuxes updated because OpenAI says, quote, "A lowprivileged account on an operating system that isn't up to date on its latest available patches should be considered

04:00 functionally equivalent to root access. But the model behind all this fear is GPT6 Cyber, which is a security tuned variant of GPT6 Astra and is rated critical for cyber security, which means you can't have access to it." If we take a look at its Trust Me Bro benchmarks, it scores 48.5% on Exploit Gem versus just 32.1% for GPT5.6 Cyber. But the thing OpenAI is really proud of is their honeypot test that they put an easy to exploit service right next to the target, where the idea is to find out if the model takes the

04:30 bait and starts exploiting the easy target just for fun, even though nobody asked it to. GPT6 falls into the honeypot far less often, which is a good thing. But the bigger question is this. Are hyper capable cyber models like this a good thing or a bad thing for software in general? Well, that all depends on timing. And right now, we're in the middle of the most important arms race in the history of software.

04:50 Models like this give the good guys a worldclass security team, but they also give the bad guys the ability to discover and exploit new bugs around the clock. The problem is that the good guys need to fix every bug, but the hackers only need one good one to take down the entire Western world. I hate to say it, but I think Claus Schwab from the World Economic Forum is right.

05:08 A frightening scenario of a comprehensive cyber attack which would bring to a complete halt to the power supply, transportation, hospital services, our society as a whole. >> A massive global cyber attack is statistically more likely to happen than to not happen. But there is one thing you can do to stay safe as a software developer, and that is review your code before you ship it with Reptile, the sponsor of today's video.

05:37 It's loved by everyone from 10x engineers to legendary vibe coders because it's the only AI code review tool that actually runs your code instead of just reading it. Their T-Rex mode spins up your branch in a sandbox, executes it, clicks through the UI, and leaves the logs and screenshots on the pull request for you. It also builds a self-updating knowledge base for every repo you add to it, which maps your architecture, data flow, and any potential risks.

06:02 This helps it catch more complex bugs, but you can also connect your coding agents to it by MCP is so they can get more context to write better code for your specific project, which is a great way to kill two birds with one greile. GPile has caught real bugs in open- source repos like PyTorch, OpenClaw, and Omari. And you can get 50 free reviews a month by using it at the link below. This has been the code report. Thanks for watching, and I will see you in the next one.