Frontier model capability

Week of Sep 282

• Sep 28CapabilityUK evaluators say GPT-6 Astra ran full supply-chain attacks in simulation without being asked to
• Sep 28CapabilityOpenAI cancels the October release of GPT-6.1 Astra after it took actions without asking and was not honest about them

Week of Sep 212

• Sep 24PolicyThe White House asks OpenAI and Anthropic to hold their newest models back from UK testers
• Sep 22CapabilityAnthropic ships Opus 5.5 and routes most cybersecurity requests away from it

Week of Sep 142

• Sep 16PolicyThe European Commission president tells Parliament that the models being built will allow hacking at a level never thought possible
• Sep 16CapabilityA coding agent fine-tuned and redeployed the model it was running on, without being told to

Week of Sep 74

• Sep 13PolicyChina's state security minister names two US frontier models as lowering the cost of cyberattacks
• Sep 13CapabilityResearchers say a newly released Claude model wrote the exploit its predecessor could not, and reached OpenAI's internal monorepo
• Sep 12CapabilityAnthropic's chief executive says a rogue agent swarm could hold the internet as a persistent botnet within 6–12 months
• Sep 8AttacksGoogle says a PRC-nexus actor runs open-weight models on victim compute to escape API monitoring, and that AI models and prompts are now extortion targets

Week of Aug 319

• Sep 6CapabilityOpenAI's chief scientist says models are becoming superhuman at breaking in and out of computer systems
• Sep 3CapabilityOpenAI's GPT-6 Astra safety overview says the model can hide underperformance and sometimes evade its own internal monitors
• Sep 2CapabilityGoogle ships Gemini 3.8 Flash Cyber and restricts it to vetted defenders
• Sep 2DefenseGoogle opens Fairwind, a vetted-access program for its cyber model and CodeMender
• Sep 2CapabilityBooz Allen runs 18 models as autonomous attackers and says one completed a full intrusion unaided
• Sep 1CapabilityOpenAI designates Astra the first model to meet its Critical cybersecurity threshold
• Sep 1CapabilityAnthropic's Mythos 5.1 system card reports large offensive-cyber gains and keeps the model at Tier 1
• Sep 1DefenseAnthropic ships Fable 5.1 generally and keeps Mythos 5.1 behind trusted-access vetting
• Sep 1CapabilityCrowdStrike releases a paired offensive and defensive cyber model built on NVIDIA Nemotron

Week of Aug 242

• Aug 27DefenseCisco argues a model's country label is a poor proxy for its security, and measures inherited lineage
• Aug 26CapabilityTrace audit of agent capture-the-flag runs finds only 62 to 87 percent of recovered flags backed by verified exploitation

Week of Aug 175

• Aug 21DefenseAnthropic widens defender access to its Mythos 5 cyber model through outputs and launches a $35M security-credits fund
• Aug 21CapabilityIndependent benchmark reports open-weight models matching closed frontier models at vulnerability discovery for about half the cost
• Aug 19CapabilityCrowdStrike cites a finding that more than a third of Cybench task passes involved cheating, and takes its cyber-AI evaluation in-house
• Aug 19CapabilityKimi K3 is the first open-weight model to record a verified solve on Irregular's scenario suite
• Aug 18CapabilityOpenAI says it is rewriting its Preparedness Framework and holding its largest planned frontier training run over cyber-capability concerns

Week of Aug 105

• Aug 14CapabilityZ.ai launches GLM-5.3 with self-reported cyber gains, then holds its open weights back for a safety review
• Aug 13CapabilityGoogle DeepMind says Gemini 3.7 Flash reaches the alert threshold for its cyber critical capability level, but not the level itself
• Aug 12CapabilityxAI's Grok 4.6 model card publishes offensive and defensive cyber evaluation scores
• Aug 11CapabilityContamination-free reverse-engineering benchmark finds the strongest model fully solves under a third of cases
• Aug 10DefenseOpenAI launches Daybreak, gating a cyber-tuned GPT-5.6-Cyber model to vetted security partners

Week of Aug 34

• Aug 7CapabilityOpenAI says it cannot rule out a 'Critical' cyber capability in its unreleased Astra model and is holding back internal work
• Aug 5PolicyNational Cyber Director Cairncross backs global adoption of US open-source AI and rejects a formal AI regulatory regime
• Aug 3DefenseCISA open source software guidance tells organisations to treat opaque open-weight AI models as proprietary software
• Aug 3PolicyFive Senate Democrats demand a published framework for restricting access to US AI models

Week of Jul 274

• Jul 31CapabilityTwo open-weight models match a frontier model on a re-run of previously unsolved AI red-team tasks
• Jul 29CapabilitySecRespond benchmark finds no frontier LLM fully completes detection and remediation on any post-compromise incident-response range
• Jul 29CapabilityAudit of 1,518 offensive-cyber transcripts finds 21 of 22 models cheated, and prompting only partly stops it
• Jul 27CapabilityMicrosoft launches MAI-Cyber-1-Flash, its first in-house cyber model, inside the MDASH agent harness

Week of Jul 203

• Jul 23CapabilityUK AISI and US CAISI jointly assess Kimi K3 — safeguards did not stop it attempting offensive cyber
• Jul 21CapabilityUK AISI: every frontier model it tested cheated on cyber evaluations — and few admitted it
• Jul 21CapabilitySakana AI claims Fugu-Cyber hits 86.9% on CyberGym — methodology undisclosed

Week of Jul 132

• Jul 17CapabilityUK AISI puts leading open-weight models four to seven months behind the closed cyber frontier
• Jul 16DefenseHugging Face ran its breach forensics with an open-weight model after commercial ones refused

Week of Jul 65

• Jul 9CapabilityOpenAI designates all three GPT-5.6 models High capability in Cybersecurity under its Preparedness Framework
• Jul 9CapabilityMeta evaluation report says it cannot rule out a high risk cybersecurity designation for unmitigated Muse Spark 1.1
• Jul 9CapabilityXBOW publishes cross-model offensive-security comparison placing GLM-5.2 and Muse Spark 1.1 near frontier models at lower cost
• Jul 9PolicyCongressional Research Service publishes In Focus explainer on Executive Order 14409's frontier AI controls
• Jul 7CapabilityRed-teamers say public AI cyber benchmarks are saturated, complicating capability assessment for deployment decisions