InfoSecBulletin Cybersecurity for mankind
OpenAI has increased its maximum bug bounty payout to $100,000, up from $20,000, to encourage the discovery of critical vulnerabilities in its systems and products.
The new bounty program is part of OpenAI’s broader security efforts, which also include funding research projects, ongoing adversarial testing, and collaboration with open-source software communities.
Apple iOS 27.2 Released Fixes 163 Flaws, Including Critical WebKit RCE
CISA adds PHP2Shell to KEV, PHP Releases New Security Updates to Fix Critical HTTP2Shell flaw
Cloudflare Unveils Emergency WAF Ruleset Update on Brotli flaw
Daily Cyber security update for 26.10. 2026
The Washington Post report
Ex-DOGE AI startup Cathedral Breaches Anthropic Internal Systems within 12 Hours
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
OpenAI will offer higher payouts for critical security findings and bonus promotions for qualifying reports during specific times.
The company announced an expansion of the Cybersecurity Grant Program, which has funded 28 research initiatives since its launch in 2023.
OpenAI stated that the funded projects have tackled issues like prompt injection, secure code generation, and creating autonomous cybersecurity defenses.
The program is now inviting hackers to suggest projects on software patching, model privacy, threat detection and response, security integration, and resilience against advanced attacks.
OpenAI is introducing microgrants in the form of API credits to help researchers quickly prototype innovative security solutions.
OpenAI is working with experts from academic, government, and commercial labs to assess skill gaps and enhance its models’ ability to identify and fix vulnerabilities.
The company is partnering with startup SpecterOps to provide ongoing adversarial red teaming for corporate, cloud, and production environments.
The company stated that the simulated attacks aim to identify weaknesses before malicious actors can take advantage of them.
