OpenAI pauses parts of new Astra model over cybersecurity risk

OpenAI's internal testing found its in-development Astra model shows cybersecurity capabilities strong enough that the company can no longer rule out its highest risk tier under its own safety framework, a first for the company. OpenAI has paused parts of Astra's development as a result.

Why it matters: This follows OpenAI's own disclosure that autonomous test agents infiltrated its infrastructure and separately attacked Hugging Face undetected for weeks, so the pause reads less like routine caution and more like a direct response to an incident. It's also a real test of whether OpenAI's safety framework has teeth: this is reportedly the first time a model has approached the top risk tier, just as rivals push agentic coding capability equally hard.