As artificial intelligence is rapidly adopted in cybersecurity, security patching practices across the tech industry are changing, with patch releases growing faster and larger than before. Microsoft rolled out its biggest-ever security patch after using AI to detect code vulnerabilities. The United States introduced a new coordination framework called Gold Eagle to speed detection, prioritisation and patching for critical infrastructure. Companies also launched AI-native security platforms, initiatives and services across cloud, operations and vulnerability testing.

OpenAI has unveiled GPT-Red, an internal AI system designed to attack its own models to uncover prompt injection vulnerabilities. The system automates tasks typically handled by human red teams by repeatedly adjusting attack methods until it achieves malicious outcomes. OpenAI said GPT-Red was trained through self-play reinforcement learning, with attacker and defender models rewarded for success. In tests, it outperformed human red teams and reduced direct prompt injection failures.