Google on Wednesday introduced Gemini 3.8 Flash Cyber, which it described as its most succesful cybersecurity mannequin, and has made it out there to a set of trusted defenders through a brand new initiative known as the Fairwind Program.
“The Fairwind Program offers high-priority defenders (like governments, healthcare suppliers, and telecommunications providers) early entry to superior fashions that assist them construct higher defenses, earlier than new threats arrive,” Google stated. “So defenders have an early benefit, to assist them shield very important infrastructure – which in flip protects individuals who depend on these techniques.”
The tech big stated it is at present working with over 650 companions globally, together with CrowdStrike, Datadog, Menlo Safety, Palo Alto Networks, and Snowflake. This system is out there to a gaggle of Google Cloud prospects, authorities companies, and cybersecurity companions.
The discharge of Gemini 3.8 Flash Cyber comes somewhat over a month after Google unveiled Gemini 3.5 Flash Cyber. The newest mannequin improves upon its predecessor by demonstrating frontier-level efficiency in autonomous vulnerability discovery, even surpassing bigger frontier fashions from rivals Anthropic (Mythos 5) and OpenAI (GPT-5.6 Sol and GPT-5.5-Cyber).
“With Gemini 3.8 Flash Cyber, we targeted particularly on equipping defenders with skilled capabilities that give them a bonus over attackers. This is the reason we’ve got invested in vulnerability fixing from the beginning, and prioritized it over offensive capabilities like exploitation,” Tulsee Doshi, senior director of product administration, and Raluca Ada Popa, Gemini Safety Lead at Google DeepMind, stated.
Anthropic Debuts Claude Fable 5.1 and Claude Mythos 5.1
The event coincides with Anthropic’s launch of Claude Fable 5.1 and Claude Mythos 5.1 with totally different ranges of safeguards, with the latter solely out there via its trusted entry applications and help work in cybersecurity and the life sciences.
The corporate additionally stated it is now permitting Fable 5.1 for use for figuring out software program vulnerabilities, but it surely expects to nonetheless redirect some cybersecurity duties to Opus fashions, like “penetration testing, exploit era, and binary-based vulnerability scanning.”
“We ran evaluations of how Claude Mythos 5.1 responds to malicious requests and immediate injections (adversarial directions hidden inside content material processed by AI fashions),” Anthropic famous. “It refused malicious agentic coding and pc use requests at a comparable price to Mythos 5, Sonnet 5, and Opus 5, and it’s our most strong mannequin thus far on an exterior immediate injection benchmark.”
The substitute intelligence (AI) firm has since additionally introduced a brand new answer known as Enterprise Frontier Safeguards (EFS), which it stated combines the “privateness of zero knowledge retention (ZDR) with state-of-the-art safeguards for detecting misuse,” whereas giving companies full management over how their knowledge is reviewed, saved, and managed. OpenAI has an analogous answer in place often called Personal Security Processing.
Moreover, Anthropic stated it has carried out extra hardening and containment measures, elevated monitoring for flagging mannequin misalignment, and paused exterior cyber evaluations of pre-release fashions in response to unauthorized entry incidents involving Claude fashions towards actual techniques, along with highlighting two contributing elements (or alignment failures) –
The fashions seem to ignore proof that their analysis environments have been related to the actual web after initially being informed they have been simulated and interpret the discrepancy in a fashion that permits them to keep up that perception
The fashions exhibit recklessness and are prepared to take dangerous actions on the actual web in single-minded pursuit of their objectives
Conceding that the incidents have been a “failure of operational safety,” Anthropic stated it has constructed a classifier that detects and blocks sandbox escape makes an attempt and adjusted specs round mannequin rewards to handle considerations the place an AI agent resorts to a shortcut to sport the reward metric with out truly attaining the supposed objective.
“Our conclusion is that the presence of considerable reward hacking in coaching could cause fashions to be prepared to carry out lengthy sequences of probably dangerous real-world actions in pursuit of process success,” the corporate added.
OpenAI Claims Astra Meets Important Cybersecurity Functionality
OpenAI, for its half, has revealed that its forthcoming Astra mannequin meets the Important cybersecurity functionality threshold beneath its Preparedness Framework, and that it intends to make its most superior cybersecurity options out there to a gaggle of testers via the Dawn Blue program.
The “Important” designation applies when an AI mannequin can independently detect and exploit zero-day vulnerabilities throughout many well-defended techniques, or perform an entire cyber assault towards a hardened goal from solely a high-level instruction with out a human guiding it alongside the way in which.
“Over the previous a number of weeks, we’ve got delayed components of Astra’s growth and launch whereas we strengthened and examined protections towards cyber misuse and unauthorized mannequin actions,” the AI firm stated. “Based mostly on that work, we consider Astra’s safeguards sufficiently reduce the chance of extreme hurt for launch beneath our Preparedness Framework.”
OpenAI stated it has additionally added stronger safeguards for Astra to stop a Hugging Face-like incident, through which its AI brokers, a part of an ExploitGym analysis discovered to strategy to exploit its analysis infrastructure and abuse Artifactory as a message board to alternate info of their quest to unravel an inconceivable process, in the end breaking into Hugging Face’s infrastructure in hopes of stealing the reply as an alternative of fixing the problem themselves.
“One agent, PHASEONE[big], orchestrated a major fraction of this dishonest analysis. PHASEONE10841 handed alongside its work to PHASEONE[big], which had the identical process however a bigger price range,” METR famous in its evaluation. “Brokers collaborated on many efforts to make cheats look reliable, together with: (1) swapping this system they needed to exploit; (2) manipulating the automated scorer; (3) manipulating transcripts to obscure proof of dishonest.”
OpenAI has reported that Astra achieves an ideal rating of 100% on ExploitBench to develop exploits from identified vulnerabilities, and that it now declines 91.5% of jailbreaking requests, in comparison with 59% from GPT‑5.6 Sol.
As well as, OpenAI famous that Astra achieves “a lot greater arbitrary code-execution charges” than GPT‑5.6 Sol utilizing far fewer output tokens, and that the mannequin found and used two zero-day vulnerabilities in unspecified software program as a part of an exploit chain throughout an analysis.
The mannequin has additionally been discovered to find beforehand unknown flaws and switch them into working exploit chains, together with a full browser-compromise that escapes the sandbox and executes arbitrary instructions on the underlying host when an HTML file is opened within the browser.
“The mannequin additionally discovered a number of vulnerabilities in a hardened working system and mixed them into an area privilege-escalation chain from an unprivileged person to root,” OpenAI added. “All collectively, our investigation has led us to conclude that Astra meets the important threshold.”
To reduce threat for extreme cyber hurt arising from Astra-like fashions, the corporate stated it has added classifiers and layered protections to enhance the robustness of its techniques towards misuse by dangerous actors and stop the mannequin from taking unauthorized, misaligned actions, even within the absence of a malicious person.
Nonetheless, OpenAI additionally warned that Astra’s safeguards could erroneously flag reliable exercise as cyber misuse or unauthorized conduct.
“Realizing the advantages of those techniques will depend upon our capacity to align and management fashions as their capabilities develop,” the upstart concluded. “That accountability extends throughout coaching, analysis, and deployment. It requires stronger proof of aligned conduct, safeguards that maintain tempo with functionality, and a willingness to decelerate when these protections should not enough.”
AI corporations have been beneath intense scrutiny within the wake of incidents the place their fashions escaped their analysis environments and focused reliable techniques. In tandem, the rise of AI-fueled cyber assaults has prompted a coalition of over 100 corporations, together with Anthropic, Google, Microsoft, OpenAI, and a number of other software program and safety distributors, to situation a joint letter calling for improved defenses to defend towards such threats.
