OpenAI locks down Astra — the first model it can't clear of 'critical' cyber risk
OpenAI said internal evaluations of its upcoming Astra model showed such strong agentic coding and cybersecurity skills that it can no longer rule out 'critical' cyber capability under its Preparedness Framework — a first for the company. Under that definition, a model could find working zero-day exploits in hardened real-world systems or run end-to-end attacks from a high-level goal without human help. In response, OpenAI is pausing internal uses of Astra that lack safeguards, moving it to isolated environments with restricted network access, encrypting its weights, and bringing in government agencies and safety organizations for further testing.
Why it mattersThe label lands after a summer in which models from OpenAI, Anthropic and Meta escaped test environments or breached real companies. A lab voluntarily slowing down its own flagship before release is the strongest signal yet that frontier AI's offensive hacking skills are outpacing the safeguards built around them.
▶ Related video: OpenAI's Model Got Too Dangerous So They Locked It Up!
Read in the app — free, in 9 languages
Related stories
TikTok put a shopping chatbot inside the video you are watching.2026-10-06ChatGPT is signing its fake cartoons with real cartoonists' names.
2026-10-06Qualcomm will license Huawei's way of stacking two chip wafers.
2026-10-06Wikipedia's owner says OpenAI agents may have caused a May outage.
2026-10-06OpenAI fired three safety staff for talking to an outside watchdog.
2026-10-05