“Trail of Bits 已将其全部安全研究团队投入其中,”OpenAI 在六月写道,当时两家公司启动了一个联合项目,旨在修复开源软件。
“Trail of Bits has committed their entire security research organization,” OpenAI wrote in June, when the two companies launched a joint project to fix open-source software.
OpenAI 正就收购 Trail of Bits 进行早期谈判,该公司专注于发现并修复开源软件中的安全漏洞。Valida Pau 和 Amir Efrati 于 10 月 13 日为 The Information 报道了此次谈判,消息来源为知情人士。
OpenAI is in early talks to buy Trail of Bits, a firm that finds and fixes security flaws in open-source software. Valida Pau and Amir Efrati reported the talks for The Information on 13 October, citing people familiar with the matter.
知情人士表示,谈判仍在进行中,仍有可能告吹。可能交易的规模尚不清楚。OpenAI 有时会以低至几亿美元的股票形式收购小型初创公司,有时金额更低,The Information 曾如此报道。
The talks are ongoing and could still fall apart, the people said. The size of a possible deal is not known. OpenAI has sometimes paid in the low hundreds of millions of dollars in stock for small startups, and sometimes less, The Information reported.
TNW 未能独立核实该报道。TNW 未发现任何公司就谈判发表公开评论。
TNW has not independently verified the report. TNW found no public comment on the talks from either company.
一家 OpenAI 已经合作的公司根据 The Information 的报道,Trail of Bits 成立于 2012 年,员工超过 40 人。其工程师为他人审计软件。八月,它开始与 Cloudflare 合作,审计 Signal 的密钥验证。
A firm OpenAI already works with Trail of Bits was founded in 2012 and has more than 40 employees, according to The Information. Its engineers audit software for others. In August, it began working with Cloudflare to audit Signal’s key verification.
两家公司自六月起开始合作。他们启动了“补全星球”(Patch the Planet)项目,该项目隶属于 OpenAI 的 Daybreak 网络安全计划。Trail of Bits 工程师使用 OpenAI 的 GPT-5.5-Cyber 模型及其 Codex 工具,在开源项目中查找漏洞。他们核实发现,编写补丁,并与维护者合作进行修复。
The two companies have worked together since June. They launched Patch the Planet, a project inside OpenAI’s Daybreak cyber programme. Trail of Bits engineers use OpenAI’s GPT-5.5-Cyber model and its Codex tools to find bugs in open-source projects. They check the findings, write patches and work with the maintainers on fixes.
项目启动时,团队正全职投入 19 个项目,OpenAI 表示。这些项目包括 cURL、Python 和 Go 项目。到那时,他们已发现数百个安全问题,并合并了数十个补丁。
At launch, the team was working full time across 19 projects, OpenAI said. These include cURL, Python and the Go project. By then it had found hundreds of security issues and merged dozens of patches.
OpenAI 的安全业务布局The Information 报道称,OpenAI 正试图构建一个可观的网络安全业务。九月,其在 Daybreak 框架下为水务公司和社区银行的网络防御投入了 10 亿美元。
OpenAI’s push into security OpenAI is trying to build a substantial cybersecurity business, The Information reported. In September, it put $1bn behind cyber defence for water utilities and community banks under Daybreak.
同样在九月,OpenAI 收购了 Glass Imaging,这是一家相机初创公司。
Also in September, OpenAI bought Glass Imaging, a camera startup.