RegulationHigh importance

OpenAI announces next security sprint with Cathedral and more than quadruples bug-bounty ranges

OpenAI is preparing its next internal security sprint in partnership with Cathedral Systems: external researchers use OpenAI's models alongside its teams to find flaws. In the previous sprint, 25% of product engineers were dedicated to finding and fixing weaknesses with Codex. In a separate post, the company more than quadruples, on average, the midpoint of reward ranges for medium, high and critical findings; a critical flaw in ChatGPT, Codex or the API reaches $30,000, exceptional findings still go up to $100,000 and, with bonuses, up to about $172,000. There are multipliers for quality, fidelity and priority campaigns, and retroactive payment for pending reports and bounties from the last 30 days. The team will be at PROMPT2PWN in Oakland on November 20 and 21.