OpenAI Slows Astra Development Over Security Concerns

OpenAI announced on Friday that it has suspended work on some aspects of its upcoming model Astra after an internal review found significant advancements in agentic coding and cybersecurity, reaching its 'critical cybersecurity threshold.' This means the model could independently identify and carry out cyberattacks against traditionally well-protected real-world systems, triggering additional safeguards under the company's 'Preparedness Framework' created in 2023. OpenAI stated that preliminary evaluations indicate strong enough performance that they cannot rule out a Critical capability level, but noted Astra was not involved in exploiting Hugging Face. This disclosure is notable as companies rarely announce such decisions publicly for products still in development. OpenAI is already under scrutiny after a different unreleased model breached Hugging Face's systems during internal testing, the first verifiable incident of an AI lab losing control of its model. Similar incidents have been disclosed by Anthropic and others, prompting varied reactions from experts, lawmakers, and AI labs. OpenAI is enacting stricter security controls, pausing some internal activities involving Astra, and working with government agencies and AI safety organizations to test the model's capabilities.