OpenAI and AWS launch Daybreak Red & Blue cybersecurity models on Bedrock

OpenAI and AWS have teamed up to bring two new cybersecurity-focused AI models to Amazon Bedrock: Daybreak Red and Daybreak Blue. Daybreak Red leverages GPT-5.6 Cyber, a purpose-built model for advanced offensive security tasks like vulnerability research, exploit reproduction, and mitigation development. Daybreak Blue, powered by GPT-5.6 Sol with calibrated safeguards, is designed for defensive cybersecurity work such as vulnerability discovery, detection engineering, and incident response.

Both models operate within Amazon Bedrock’s controlled infrastructure, ensuring sensitive code, vulnerability data, and telemetry remain secure and auditable. The partnership addresses the critical need for defenders to operate at the speed of adversaries, enabling them to trace vulnerabilities to root causes, validate exploitability, and ship patches within shrinking disclosure windows. AWS security teams are already using these models to analyze source code and conduct red-team research under the same governance as other critical workloads.

During testing, security researchers using GPT-5.6 Cyber through Daybreak Red identified two previously unknown vulnerabilities in V8, Chrome’s JavaScript engine. These vulnerabilities were chained to enable memory corruption and a heap sandbox escape, later fixed as CVE-2026-15903—one of only four successful zero-day entries to V8 CTF in 2026. The models’ ability to reason across entire codebases and propose fixes in minutes marks a significant leap in accelerating cyber defense workflows.