GPT-RED

OpenAI GPT-RED and Fudan AgentCyberRange Usher in the Era of AI Self-Play Cybersecurity

In July 2026, three major milestones signaled a shift from human-led to AI-driven security testing: OpenAI released GPT-RED, an automated red-team model trained via self-play reinforcement learning; Fudan University open-sourced AgentCyberRange, the first realistic cyber-range benchmark for AI agents; and the UK AISI quantified that frontier AI cyber-attack capabilities are doubling every four months. GPT-RED demonstrated 6.5× higher indirect prompt-injection success than human experts and discovered the previously unknown “Fake Chain-of-Thought” attack that bypasses reasoning models. AgentCyberRange evaluated six leading AI systems across 110 vulnerabilities in 15 real applications and 156-host enterprise ranges, with GPT-5.5 leading in both web exploitation and post-exploitation tasks. AISI’s multi-step scenarios showed models progressing from 1.7 to fully solving 32-step enterprise attacks within 18 months. Together the developments illustrate an accelerating “AI versus AI” paradigm in which stronger attack models generate better defensive training data, yet also highlight persistent gaps in OPSEC, deep vulnerability reach, and the high compute barriers to replicating such systems.