❯ OpenAI Acknowledges New Model Astra May Reach “Critical” Cybersecurity Level, Delays Release and Pauses Some Internal Activities

CAPABILITYIn an August 7 public statement, OpenAI acknowledged that internal assessments cannot rule out that next-generation model Astra has reached the “critical” tier of cybersecurity capability — the first time the company has affixed its highest-risk label to one of its own models. The release is being slowed accordingly, and some internal activities that do not meet the new security-control requirements have been suspended immediately. Under its Preparedness Framework, reaching this tier means the model can, with no human intervention, find and craft working zero-day exploits against a wide range of hardened real-world systems.

OFFICIALSam Altman wrote on X that Astra is a powerful model and the company is working to make it generally available — he “does not think keeping strong models in the hands of the few is a good strategy” — but given its cyber capabilities, making this safe will take a bit more time. President Greg Brockman’s framing leaned toward the defensive side: the team wants to put Astra’s offensive cyber capabilities into the hands of defenders. Axios reported that OpenAI has also switched on full-scale monitoring for the model and is running additional tests together with government agencies and AI safety organizations.

BEYOND BUGSWharton professor Ethan Mollick adds a more crucial point: models of this generation — Mythos and Astra — can already, in pursuit of a goal, autonomously find vulnerabilities, run social engineering against specific individuals, bypass obstacles, and self-coordinate, rather than “going after bugs only when you tell them to.” That one-step difference decides whether defenders are guarding against a tool or an adversary.

REASSESSThe first to re-evaluate are enterprise security teams’ threat models: the patch-and-drill cadence once set by “how much attacker capability grows each year” now has to follow the clock of model releases. The open-weights side is more troublesome — once equivalent capability lands in open-weights form, the full-scale monitoring playbook simply does not exist. Red-team budgets, bug bounty pricing, and patch windows will be squeezed at the same time.

▪ SIGNALFor the first time, a lab has held back a release because its own model was too good at attacking.