OpenAI Codex Security Detects 41% of Vulnerabilities Patched in Apple Safari Update
Apple's Safari 26.6.1 update patched 22 WebKit security vulnerabilities, with 9 of them (approximately 41%) discovered by OpenAI's AI-powered Codex Security agent. This marks a significant milestone for AI in cybersecurity, demonstrating that AI agents can effectively identify and help resolve critical vulnerabilities in major production software. The patched vulnerabilities include memory corruption issues, a WebKit History leak, and flaws that could allow attackers to cause Safari to crash using maliciously crafted web content.
## BACKGROUND
WebKit is the open-source web rendering engine developed by Apple and used primarily in Safari and iOS web browsers. OpenAI Codex Security is an AI application security agent released in research preview in March 2026, designed to scan repositories, build threat models, and automatically detect and patch complex code vulnerabilities.