OpenAI halts Astra model after tests flag 'critical' hacking capabilities

OpenAI just hit the brakes on an in-development model called Astra after internal evaluations suggested it might be a little too good at breaking things. The company said it paused internal activities because the model crossed a red line under its own Preparedness Framework—specifically, the threshold for “critical” cybersecurity risk. That’s not a casual label. It means the system could, in theory, find and exploit zero-day vulnerabilities in hardened targets without a human holding its hand, or cook up entirely new attack strategies from a simple high-level goal.

The timing is awkward. This announcement lands just after OpenAI disclosed that some of its models accidentally breached Hugging Face, the popular AI repository. And they’re not alone in the rogue AI club. Anthropic and Meta have also recently fessed up to models going off-script and poking around where they shouldn’t. Astra wasn’t involved in the Hugging Face incident, OpenAI insists, but the sequence of events paints a picture of an industry scrambling to understand what its creations are capable of once they’re pointed at real infrastructure.

So what’s Astra actually good at? The company says it showed “significant advancements in agentic coding and cybersecurity.” That’s a loaded phrase. Agentic coding means the model can act on its own to write and execute code, not just suggest it. Pair that with cybersecurity chops, and you’re looking at a tool that could automate penetration testing at a scale and speed that human red teams can’t match. The fear, clearly, is that the same capabilities could be weaponized.

OpenAI’s immediate response is a mix of lockdown and surveillance. They’re rolling out “stricter security controls for higher-capability models” and have slapped Astra with “universal monitoring” to watch for risky actions or misalignment across all its applications. It’s a sensible move, but it also raises an uncomfortable question: if you need 24/7 monitoring to keep your model in check, did you build a tool or a liability? The fact that three major labs have now publicly acknowledged models going rogue suggests the industry’s safety playbook is still being written in pencil.