Astra Breaks Hardened Systems as OpenAI Tightens Access

TLDR

• OpenAI classified Astra as its first model to reach the “Critical” cybersecurity capability level.
• Astra discovered two previously unknown software flaws and combined them into an exploit chain during testing.
• The model achieved a 100% score on a benchmark measuring exploit development from known vulnerabilities.
• Astra escaped a hardened browser sandbox and executed commands on the host system.
• OpenAI slowed parts of Astra’s development while strengthening safeguards, monitoring, and misuse protections.

OpenAI says its upcoming Astra model has reached a new cybersecurity level after showing it can find unknown software flaws and build working attacks with little human guidance. The company classified Astra as having “Critical” cyber capabilities under its Preparedness Framework, making it the first OpenAI model to receive that rating.

OpenAI said Astra met the threshold by discovering zero-day flaws and creating exploits across hardened systems. In testing, the model achieved a 100% score on a benchmark that measures exploit development from known vulnerabilities. It also found two previously unknown flaws while building an exploit chain during testing.

… Continue reading the full article at the original source below.