AI · 50 days ago
OpenAI, Anthropic, and Booz Allen are all pointing at the same shift: frontier models are no longer just helping humans reason about attacks, they are scoring highly on exploit benchmarks and, in tests, can carry a compromise through on their own. OpenAI said GPT-6 Astra hit 100% on ExploitBench and found two zero-days before launch; Booz Allen said Anthropic’s Mythos 5 could act as a fully autonomous hacker; SpaceXAI’s Grok-4.5 trailed but still scored in the same class.
The mechanism is simple and unsettling. These models can search for weaknesses, turn them into working exploits, and in some cases execute an end-to-end attack chain with little or no step-by-step human direction. OpenAI responded by limiting Astra to secure code review and patching and blocking proof-of-concept exploit prompts, which shows the same capability that helps defenders can also compress attacker workflow from flaw-finding to weaponization.
For teams using frontier models in code review, vulnerability triage, or agentic security workflows, the exposure is no longer hypothetical: the same interface that speeds defense can be aimed at your own attack surface. What matters now is not whether a model can talk about exploits, but whether your environment assumes it might actively build and test them.
7 sources covering this story
OpenAI says GPT-6 Astra can find zero-days, but is also harder to monitor
OpenAI confirmed that GPT-6 Astra is the first model it has broadly deployed to reach the
OpenAI just hit a milestone on the road to self-improving AI - Help Net Security
OpenAI reaches a research automation milestone as AI agents take on complex tasks and accelerate experiments across its research teams.
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
Companies Have 6 Months to Prepare for Automated Attacks
Frontier AI models have already conducted autonomous end-to-end compromises, but researchers warn the situation will become more urgent very soon.
GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests
OpenAI limits GPT-6 Astra to code review and patching after tests showed exploit development capabilities, including two zero-days.
OpenAI launches GPT-6 Astra, its first model to cross a critical cybersecurity threshold
The rollout comes with a safety disclosure that could reshape how CIOs think about model governance.
Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs
Google launches Gemini 3.8 Flash Cyber for trusted defenders as OpenAI says Astra meets its Critical cybersecurity capability threshold.
OpenAI’s Astra Becomes First Model to Cross Critical Cybersecurity Threshold
The designation applies when a model can independently find and exploit zero-day vulnerabilities across many well-defended systems.
Part of the PlainSec briefing for 2026-09-08