{"slug": "openai-is-now-using-ai-to-attack-its-own-ai-and-it-s-working-better-than-humans", "title": "OpenAI is now using AI to attack its own AI, and it's working better than humans ever did", "summary": "OpenAI has developed an internal AI model called GPT-Red that automatically finds security flaws in its GPT models, achieving an 84% success rate in test scenarios compared to 13% for human red teamers. The system uses self-play reinforcement learning to improve both attack and defense models, and its findings have been used to train GPT-5.6 Sol, which shows six times fewer failures on direct prompt injections than the best model from four months ago.", "body_md": "# OpenAI is now using AI to attack its own AI, and it's working better than humans ever did\n\n**OpenAI trained an internal AI model called GPT-Red to automatically find security flaws in GPT models.** GPT-Red simulates [prompt injections](https://the-decoder.com/openai-admits-prompt-injection-may-never-be-fully-solved-casting-doubt-on-the-agentic-ai-vision/) and other attacks where malicious instructions hide in emails, websites, or files. Trained via self-play reinforcement learning, GPT-Red attacks while defender models block, and both improve over time. It finds successful attacks in 84 percent of test scenarios versus 13 percent for human red teamers. In one test, it manipulated an AI-powered vending machine in OpenAI's office, changed prices, and canceled other customers' orders.\n\nThe results feed directly into training. [GPT-5.6 Sol](https://the-decoder.com/openais-claude-mythos-competitor-gpt-5-6-sol-launches-under-government-controlled-access-it-calls-unsustainable/) shows six times fewer failures on direct prompt injections than the best model from four months ago, OpenAI says, without hurting general performance. But about 3.8 percent of \"stronger\" prompt injections still succeed. Scale that to hundreds or thousands of attempts, and a sizable number get through, [similar to Claude Opus 4.5](https://the-decoder.com/claude-opus-4-5-resists-prompt-injections-better-than-rivals-but-still-falls-to-strong-attacks-alarmingly-often/).\n\nGPT-Red stays internal; a paper with more details will follow.\n\n```\nAI News Without the Hype – Curated by Humans\n\n\t\t\t\t\tSubscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive \"AI Radar\" frontier report six times a year, full archive access, and access to our comment section.\t\t\t\t\n\n\t\t\t\t\tSubscribe now\n```\n\n[OpenAI](https://openai.com/index/unlocking-self-improvement-gpt-red/)", "url": "https://wpnews.pro/news/openai-is-now-using-ai-to-attack-its-own-ai-and-it-s-working-better-than-humans", "canonical_source": "https://the-decoder.com/openai-is-now-using-ai-to-attack-its-own-ai-and-its-working-better-than-humans-ever-did/", "published_at": "2026-07-15 19:47:53+00:00", "updated_at": "2026-07-15 20:01:33.398692+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-safety", "ai-research", "large-language-models", "ai-products"], "entities": ["OpenAI", "GPT-Red", "GPT-5.6 Sol", "Claude Opus 4.5"], "alternates": {"html": "https://wpnews.pro/news/openai-is-now-using-ai-to-attack-its-own-ai-and-it-s-working-better-than-humans", "markdown": "https://wpnews.pro/news/openai-is-now-using-ai-to-attack-its-own-ai-and-it-s-working-better-than-humans.md", "text": "https://wpnews.pro/news/openai-is-now-using-ai-to-attack-its-own-ai-and-it-s-working-better-than-humans.txt", "jsonld": "https://wpnews.pro/news/openai-is-now-using-ai-to-attack-its-own-ai-and-it-s-working-better-than-humans.jsonld"}}