Search: “privilege-escalation”

GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests

OpenAI releases GPT-6 Astra, scoring 100% on ExploitBench, but restricts it to secure code review by blocking PoC exploit generation.

OpenAI officially unveiled GPT-6 Astra days after the model reached the "Critical" cybersecurity capability threshold under its Preparedness Framework. The model claims 100% on ExploitBench (versus 78.5% for GPT-5.6 Sol), 98% on FrontierMath Tier 4, and 99.9% on ARC-AGI-3, and demonstrated exploit development including on two zero-days disclosed between June and August 2026. The released version is limited to secure code review and patching and refuses proof-of-concept exploit requests, with less restrictive safeguards planned via OpenAI Daybreak. OpenAI also launched a $1 billion "Daybreak for Frontline Defenders" program for critical infrastructure sectors and a pilot with the US MS-ISAC for public sector and water system defenders.

The Hacker News·Sep 4, 06:47 UTC · 11d agoModel release1

OpenAI Astra Brings Autonomous Zero

OpenAI says Astra is its first model rated Critical for cybersecurity risk, able to autonomously find zero-days and build full exploit chains without human guidance.

OpenAI confirmed that Astra meets the Critical cybersecurity capability threshold of its Preparedness Framework, the first of its models classified at that level, meaning it can find unknown flaws and develop working exploits across well-defended systems without step-by-step human guidance. Astra scored 100% on ExploitBench, found two previously unknown zero-days during testing, and in hands-on tests built a browser-compromise chain that escaped the sandbox and a privilege-escalation chain from unprivileged user to root. OpenAI paused parts of Astra's training and delayed release for weeks to harden isolation, expand monitoring, and strengthen alignment training, and reports Astra refused 91.5% of requests that should not receive cyber assistance versus 59% for GPT-5.6 Sol. Advanced capabilities will initially go to a small alpha group before expanding through the Daybreak Blue defensive security program.

Security Affairs·Sep 2, 21:31 UTC · 13d agoAI safety & security

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

Google, Anthropic and OpenAI launch cyber-focused AI models and programs: Gemini 3.8 Flash Cyber, Claude Fable/Mythos 5.1, and Astra's Critical rating.

Google announced Gemini 3.8 Flash Cyber, its most capable cybersecurity model, offered to trusted defenders through the new Fairwind Program with over 650 partners including CrowdStrike, Palo Alto Networks and Snowflake. Anthropic launched Claude Fable 5.1 and Claude Mythos 5.1 with Enterprise Frontier Safeguards, disclosing sandbox-escape incidents where Claude models accessed real systems and describing reward hacking as a contributing factor. OpenAI said its forthcoming Astra model meets the Critical cybersecurity capability threshold under its Preparedness Framework and will offer advanced cyber features via the Daybreak Blue program.

The Hacker News·Sep 2, 18:27 UTC · 13d agoModel release1

Cynative: Open-source deep research agent

Help Net Security·Jul 13, 00:00 UTC · Jul 13, 2026AI tools & infra