AgentsSep 1
Image: openai.com
OpenAI rates unreleased Astra model Critical for cyber capability
OpenAI says Astra, a model it has not released, is the first it rates at the Critical cybersecurity capability threshold, meaning that with suitable tools and access it can find previously unknown software flaws and build them into exploit chains against many hardened systems. The company says it delayed parts of Astra's development and release after the Hugging Face incident. It restarted a paused large reinforcement-learning training run on August 28, 2026, after adding isolation, monitoring, and alignment controls. By OpenAI's own account, finding and chaining unfamiliar flaws is moving into what a model can do with much less human direction.
Positive - OpenAI paused Astra’s development until stronger isolation, monitoring, and alignment controls were in place, then limited its critical cyber capabilities to selected testers.
AgentsSep 1
Image: blogs.nvidia.com
CrowdStrike ships SafeMind agents inside its Falcon platform
CrowdStrike shipped SafeMind into its Falcon platform yesterday, pairing post-trained NVIDIA Nemotron models with agent harnesses (that is, the scaffolding that decides which tools an agent may call and when) built for security work. NVIDIA says the system was exercised in a simulated copy of NVIDIA's own network, with one set of agents hunting for attack paths and another writing and validating the detections meant to catch them. For a security team, the offer is investigation, prioritization, and remediation help running at machine speed under vendor management. Customers can also run the models on their own or plug their own models into CrowdStrike's harnesses.
Positive - CrowdStrike tested offensive and defensive agents in a simulated network before deploying the resulting detection system through Falcon.
TextSep 1
Image: anthropic.com
Anthropic releases Claude Fable 5.1 and cuts cached-context price 75%
Anthropic released Claude Fable 5.1 yesterday and dropped the price of reading cached context to $0.25 per million tokens, 75% below what Fable 5 charged. Agents that keep rereading the same code, documents, and tool definitions across a long session pay for that repetition, so the cut lands on exactly the kind of hours-long coding and research work companies are running. Anthropic says the model's new cyber safeguards let it identify software vulnerabilities while withholding exploit development, which leaves defensive work available to security teams on the generally available model. The company also says that after reporting cyber-evaluation incidents on July 30, it added pre-tool checks (that is, checks run before the model is allowed to use a tool) and stronger isolation before resuming external testing.
Positive - Anthropic added pre-tool checks and stronger isolation before resuming external testing, containing Fable’s vulnerability-finding capabilities behind new safeguards.
TextSep 2
Refusal-stripped open models confirmed far more weak bug reports
Abliterated models, meaning open models modified to strip out their refusals, are popular in security research because they will discuss attacks the originals decline to touch. A clearbluejar analysis reported today ran base and abliterated builds of Gemma and Qwen over FreeBSD source code and found some altered versions confirming far more weak bug candidates than the originals. In one 28-file run, an abliterated Gemma produced 144 candidates and marked 138 of them valid, while missing the known CVE (a publicly catalogued vulnerability) that the base model found. For a team pointing local models at its own code, agreeableness like that buys extra triage work and a real flaw left uncaught.
Positive - Controlled testing exposed that altered open models can confidently endorse weak bug reports while missing a known flaw, giving defenders evidence of their reliability limits.
