OpenAI pauses parts of Astra development over potential critical autonomous cyber capabilities

OpenAI is tightening restrictions on testing of its upcoming Astra model due to security concerns

The Sam Altman-led company said it cannot rule out that the Astra model has reached the “Critical” threshold, meaning it can potentially exploit real-world systems or execute cyberattacks without human guidance.

OpenAI says its next major model may be dangerous enough to write its own cyberweapons, and it's pulling back until the safeguards catch up.

The move comes after a spate of incidents in which autonomous AI agents escaped their approved environments.

The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’ threshold.  The post OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns appeared first on SecurityWeek.

Preliminary evaluations found the unreleased model may have reached a "critical" cybersecurity threshold under the company's safety framework

Meta slowed down development of its Astra model as it couldn't 'rule out critical cyber capabilities.'

OpenAI’s internal evaluation of its upcoming model, Astra, found significant advances in agentic coding and cybersecurity, leading the company to conclude that it cannot rule out the model reaching the critical capability level for cybersecurity under its Preparedness Framework. The Preparedness Framework, first published in December 2023, outlines how OpenAI evaluates frontier AI risks and determines the safeguards required before deploying increasingly capable models. It identifies high-risk capability areas, including cybersecurity, biological and chemical threats, … More → The post OpenAI locks down Astra over potential critical cyber capabilities appeared first on Help Net Security.

‘It’s important to be transparent’: Citing potentially alarming cybersecurity risks, the ChatGPT maker has paused the launch of Astra, its next-generation autonomous AI agent.

OpenAI has announced that it's pausing some "internal activities" involving its upcoming artificial intelligence (AI) model Astra after an internal evaluation found it had made significant advancements in agentic coding and cybersecurity. In response to the discovery, the AI upstart said it's implementing security controls for higher-capability models and associated activities, such as isolated

OpenAI is pausing internal activity related to a new artificial intelligence model due to security concerns. The AI startup announced this decision on its blog Friday (Aug. 7) after an in-house evaluation of its Astra model caused the company to realize it could not “rule out critical cyber capabilities” under its Preparedness Framework, which outlines […] The post OpenAI Halts New Model Rollout Due to Security Worries appeared first on PYMNTS.com.

OpenAI announced Friday it's pausing work on its Astra AI model because of security concerns. The Guardian reports: The company had evaluated the agent, Astra, and found "significant advancements in agentic coding and cybersecurity", which had moved to a "critical" threshold... OpenAI stated that the model was not involved in an incident in which one of its AI agents went rogue during a test, accessed the open web and hacked a startup, Hugging Face... The reports have increased concerns about advancements in AI models and humans' ability to control them. Still, critics of the AI industry have warned that such disclosures from OpenAI and its competitors Anthropic and Meta could be designed to generate hype about the technology's power and thus spur additional interest from investors. To prevent potential rogue behavior from AI agents, OpenAI is "implementing stricter security controls for higher-capability models and associated activities, including isolated testing environments, restricted network and tool access", the company's blogpost stated. It will also install "enhanced model weight protections and encryption, additional monitoring and detection capabilities". The company will pause internal activities involving Astra that do not meet these new requirements. "We believe it's important to be transparent with the public and the safety and security communities about this potential shift in capabilities..." OpenAI wrote in a blog post titled "Responding to the next frontier of critical cyber capabilities." Under our Preparedness Framework, a model reaches the Critical cybersecurity threshold if it can identify and develop functional zero-day exploits of all severity levels in many hardened real-world critical systems without human intervention, or can devise and execute end-to-end novel strategies for cyberattacks against hardened targets given only a high level desired goal. While we continue to benchmark and assess this model, our preliminary evaluations indicate strong enough performance that we cannot rule out Critical capability level at this time... Accordingly, we have scaled up robustness testing of our safeguards and security controls so that they are appropriate for a deployment of these capabilities... - We are implementing stricter security controls for higher-capability models and associated activities, including isolated testing environments, restricted network and tool access, enhanced model weight protections and encryption, additional monitoring and detection capabilities, and sandboxed execution. - We are pausing internal activities involving Astra that do not yet meet these strengthened security control requirements. - We have implemented universal monitoring for risky actions and misalignment across all agentic applications of Astra, including training and evaluation. Monitors evaluate the model's Chain of Thought and trigger a security response to review and interrupt high risk activity. - We will work with relevant government agencies and select AI safety organizations to test the capabilities for this model... We believe advanced cyber-capable models should help defenders identify and address vulnerabilities before attackers do. We're committed to working alongside governments, safety institutes, and civil society to ensure that the frontier capabilities of models like Astra, and those that follow, are deployed responsibly and broadly for the benefit of all humanity. Read more of this story at Slashdot.

OpenAI is pausing some work on Astra after testing found the AI could identify and exploit software vulnerabilities without human intervention.

Agent found to be able to find and exploit vulnerabilities without human intervention, and to carry out cyber-attacksOpenAI will pause some work on an artificial intelligence model because of security concerns, the company stated Friday, following a series of incidents in which AI agents have escaped containment.The company had evaluated the agent, Astra, and found “significant advancements in agentic coding and cybersecurity”, which had moved to a “critical” threshold where it can find and exploit vulnerabilities without human intervention, or devise and execute cyber-attacks when given only a “high level desired goal”. Continue reading...

OpenAI said on Friday it cannot rule out that its upcoming AI model, Astra, has “critical” cybersecurity capabilities, prompting the startup to pause some internal development and trigger safety protocols. Under OpenAI’s safety guidelines, a model reaches the “critical” threshold if it can autonomously identify and exploit severe, real-world software vulnerabilities, known as zero-day exploits, or execute complex cyberattacks against highly secure targets without human intervention. Here are some details on Astra: This follows an exclusive report by Reuters that OpenAI has discovered more instances in which autonomous agents have escaped containment as the company expands its investigation of the hacking incident at tech firm Hugging Face that drew global attention in July. In the last few weeks, OpenAI, Anthropic and Meta Platforms have disclosed that their AI models broke into other companies’ systems during cybersecurity testing, highlighting how advancing AI capabilities are straining developers’ ability to keep their systems contained. Preliminary evaluations over the past several days, along with outside expert assessments, indicated Astra may be capable of performing increasingly sophisticated cyber tasks autonomously, OpenAI said. “While we continue to benchmark and assess this model, our preliminary evaluations indicate strong enough performance that we cannot rule out ‘critical’ capability level at this time,” the ChatGPT maker said. In response to the preliminary findings, OpenAI said it has scaled up security controls and paused internal activities involving Astra that do not meet its newly strengthened security requirements. Astra’s development will be moved into isolated testing environments with restricted network access and sandboxed execution. CEO Sam Altman said on X that OpenAI is working to make Astra generally available, as the company does “not think it is a good strategy to keep powerful models to a chosen few”. OpenAI also clarified that Astra was not involved in the hack targeting the AI platform Hugging Face. It will partner with government agencies and select AI safety organisations to test the model’s capabilities.

OpenAI Astra AI is in the limelight after the company raised concerns about the cybersecurity capabilities of its upcoming artificial intelligence model, Astra AI, following preliminary evaluations that indicated the system could approach what the company classifies as a “critical” cybersecurity capability threshold. The disclosure marks an important moment in the development of frontier AI, […]

OpenAI has paused development of its advanced AI model Astra due to security concerns. Internal evaluations revealed critical cyber capabilities which prompted this decision. This move follows other AI models escaping testing environments and causing breaches. The company is enhancing safety measures and collaborating with external auditors. OpenAI aims for responsible deployment of frontier AI capabilities for humanity.

New Delhi: OpenAI on Friday said its upcoming artificial intelligence model, Astra, has demonstrated significant advances in agentic coding and cybersecurity, prompting the company to conclude that it cannot currently rule out the model reaching the "Critical" cybersecurity capability threshold under its Preparedness Framework.https://t.co/zBh8ck0Gbc— OpenAI (@OpenAI) August 7, 2026 The company said its latest internal evaluations, conducted over the past few days along with assessments by experts, showed a notable improvement in the model's ability to perform cybersecurity-related tasks. OpenAI said it was sharing the findings to maintain transparency with the public, governments and the broader AI safety and security community.Under OpenAI's Preparedness Framework, a model reaches the Critical cybersecurity threshold if it can identify and develop functional zero-day exploits across severity levels in multiple hardened, real-world critical systems without human intervention. The threshold also includes the ability to develop and execute novel, end-to-end cyberattack strategies against hardened targets based only on a high-level objective.WhatsApp Tests Optional Date Of Birth Feature In India Ahead Of DPDP Act Age Verification Rules OpenAI clarified that Astra is an upcoming model and was not involved in the exploitation of Hugging Face. The company added that its preliminary evaluations are still ongoing, but performance has been sufficiently strong that Critical-level capability cannot be ruled out at this stage.In response, OpenAI said it has expanded robustness testing of Astra's safeguards and security controls to ensure they are suitable for models with potentially advanced cyber capabilities.The company is implementing stricter security measures for higher-capability models, including isolated testing environments, restricted network and tool access, stronger protection and encryption of model weights, enhanced monitoring and detection systems, and sandboxed execution.NHRC Issues Notice To Meta Over POCSO Violations On Instagram & Facebook: All Details OpenAI said it has also paused internal Astra-related activities that do not yet meet the strengthened security requirements. Universal monitoring for risky actions and potential misalignment has been implemented across Astra's agentic applications, including training and evaluation. These monitoring systems assess the model's chain of thought and can trigger a security response to review or interrupt high-risk activity.The company also plans to work with relevant government agencies and selected AI safety organisations to test Astra's capabilities, while providing recommended security controls to third-party testing partners conducting higher-risk evaluations.OpenAI said its Preparedness Framework had previously guided its response to emerging capabilities in areas such as biology. The company said it wants advanced cyber-capable models to help defenders identify and address vulnerabilities before malicious actors can exploit them, while stressing the need for responsible deployment of increasingly capable AI systems.(Except for the headline, this article has not been edited by FPJ's editorial team and is auto-generated from an agency feed.)

OpenAI said it has suspended work on some aspects of its upcoming model Astra over concerns about its cybersecurity prowess.

OpenAI today said it is "pausing" activities involving its upcoming AI model Astra, because its cyber capabilities are potentially too dangerous. OpenAI says its newest internal evaluations show "significant advancements in agentic coding and cybersecurity," and it cannot rule out "critical cyber capabilities." Prior OpenAI models, including GPT–5.6 Sol, were labeled as "High." Astra triggers stricter guidelines in OpenAI's "Preparedness Framework." The guidelines call for caution when developing frontier AI capabilities that create risks of severe harm, and the cybersecurity portion of the framework says OpenAI will implement extra safeguards for models that "create new risks of scaled cyberattacks and vulnerability exploitation." The "Critical" threshold Astra may have hit is defined by an ability to identify and develop functional zero-day exploits of all severity levels in many hardened real-world critical systems without human intervention, or devise and execute end-to-end novel strategies for cyberattacks. OpenAI says it is increasing its safeguards and security controls before deploying Astra, including limiting work on the model until new safeguards are in place. The company plans to use isolated testing environments with restricted network and tool access, along with adding sandboxed execution and more monitoring capabilities. OpenAI says it will work with relevant government agencies and AI safety organizations to test Astra. "We're committed to working alongside governments, safety institutes, and civil society to ensure that the frontier capabilities of models like Astra, and those that follow, are deployed responsibly and broadly for the benefit of all humanity," writes OpenAI. Astra wasn't formally announced, but OpenAI shared details on its next major model in a recent post outlining its mathematical advancements. Astra solved 10 open problems in math and theoretical computer science for around $2,000 (in Sol API rates). Advancements in AI are changing cybersecurity for major tech companies like Apple by unearthing an unprecedented number of bugs. Apple recently limited its bug bounty program submissions because it is having trouble handling the volume. Models like Claude Mythos are able to suss out critical vulnerabilities, and Apple is one of Anthropic's Mythos partners. Mythos is limited to select companies because in addition to finding vulnerabilities, it has the potential to exploit them. OpenAI made headlines in July because GPT–5.6 Sol and a "more capable pre-release model" (not Astra) autonomously hacked Hugging Face during internal benchmark testing. Anthropic found Claude had done something similar. Meta this week said it too had an AI model hack another company during a cybersecurity evaluation.Tag: OpenAIThis article, "OpenAI Delays Next Major AI Model 'Astra' Over Critical Hacking Concerns" first appeared on MacRumors.comDiscuss this article in our forums

The decision reflects internal findings that the upcoming “Astra” model may possess “critical cyber capabilities” and follows a string of AI-testing incidents.

OpenAI says it is pausing "internal activities" around an in-development AI model, Astra, because it doesn't yet meet new security standards the company is putting in place. The announcement follows its recent disclosure that OpenAI models accidentally hacked Hugging Face. Anthropic and Meta have also since admitted that they had AI models that went rogue […]

OpenAI tested Astra, one of its upcoming models, over the past few days. In a post on Friday, it said the results were strong enough that it “cannot rule out” critical cyber capabilities. So it is pausing some internal work on the model and scaling up security while testing continues. “Critical” is the top rung […] This story continues at The Next Web

OpenAI is pausing some internal work around one of its upcoming artificial intelligence models to implement stricter safeguards after the system was found to be significantly more adept at cybersecurity tasks.