[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fABbi5f4X2PYLfZPjaDDXfwTgO03ZE444IyJRih5LtaY":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":79},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"ae094c11-ef0d-4d1c-bde4-2ac2c28f47ac","GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests","gpt-6-astra-scores-100-on-exploitbench-as-openai-blocks-poc-exploit-requests-09bf1e","OpenAI on Thursday officially unveiled GPT‑6 Astra, which it described as the \"world's most intelligent and aligned model.\" The development comes days after the artificial intelligence (AI) company said the model had reached the \"Critical\" cybersecurity capability threshold under its Preparedness Framework. \"Astra is state-of-the-art on computer use, browsing, software engineering,","OpenAI has launched GPT-6 Astra, an AI model that scored a perfect 100% on ExploitBench, a test for developing exploits from software vulnerabilities. While the model demonstrated advanced capabilities in identifying and exploiting zero-day vulnerabilities, OpenAI has implemented safeguards to prevent its misuse for creating proof-of-concept exploits, limiting its current use to secure code review and patching.","OpenAI unveils GPT-6 Astra, achieving 100% on exploit development tests.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fgpt-6-astra-scores-100-on-exploitbench.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhbaZmLqqSMfwaOmjs47_PEd97T29HeDX_1dAOZn0Qzo0HuloopzzhZ7pnQzlsHvXvIAwzMWq1tbza325niZMSgjTMn0z5MyT-CWb7NfoprOWz2L_cj6tosVDyyp2ZbV4s59p-khE64lXWULLOW8zVMCv720iwDwCYUEuAHYkV8m2diDsyzFKwvNifzq-oT\u002Fs1600\u002Fgpt6.jpg","2026-09-04T06:47:52+00:00","2026-09-04T10:00:21.688973+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"GPT-6 Astra","product",{"name":21,"type":22},"OpenAI","vendor",{"name":24,"type":19},"GPT-5.6 Sol",{"name":26,"type":19},"ChatGPT Plus",{"name":28,"type":19},"ChatGPT Pro",{"name":30,"type":19},"ChatGPT Business","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":31,"icon":33,"name":34,"slug":35},null,"AI Security","ai-security",[37,42,44],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18,24],{"controls":52,"vendors":78},[53],{"slug":35,"name":54,"problem":55,"products":56},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":74,"product_name":75,"url":76,"description":77},"boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",[],{"slug":80,"title":81,"body":82,"framework_refs":83,"framework_notes":96},"ai-scores-perfect-100-on-exploit-benchmark-a-wake-up-call-for-defenders","AI Scores Perfect 100% on Exploit Benchmark — A Wake-Up Call for Defenders","GPT-6 Astra's perfect score on ExploitBench demonstrates that AI models have reached a capability threshold where they can autonomously identify and exploit zero-day vulnerabilities at scale, dramatically lowering the barrier for sophisticated attacks. While OpenAI has implemented guardrails to block direct proof-of-concept exploit generation, these controls are only as strong as their enforcement and can potentially be bypassed through prompt manipulation or via less-responsible AI providers. This development compresses the already-narrow window between vulnerability disclosure and weaponization, making rapid patching and proactive vulnerability management more critical than ever. Organizations must recognize that adversaries now have access to AI-powered offensive tools that can outpace traditional human-speed defenses.",[84,85,86,87,88,89,90,91,92,93,94,95],"CIS Control 7 – Continuous Vulnerability Management","CIS Control 6 – Access Control Management","CIS Control 16 – Application Software Security","NIST SP 800-53 RA-5 – Vulnerability Monitoring and Scanning","NIST SP 800-53 AC-3 – Access Enforcement","NIST SP 800-53 SI-3 – Malicious Code Protection","NIST AI RMF – Govern 1.1 (AI Risk Policies)","NIST AI RMF – Map 5.1 (Identify AI-related threats)","MITRE ATT&CK – T1190 Exploit Public-Facing Application","MITRE ATT&CK – T1587.004 Develop Capabilities: Exploits","EU AI Act – Article 5 (Prohibited AI Practices)","GDPR Article 32 – Security of Processing (where PII is at risk from exploits)",{}]