Microsoft Says MDASH Beats Claude Mythos and GPT-5.6 Sol in Cybersecurity Test
Microsoft has released its first dedicated cybersecurity model named MAI-Cyber-1-Flash and plugged it into MDASH, a vulnerability-hunting system that it says beats Anthropic's Mythos 5 and OpenAI's GPT-5.6 Sol while costing 50% less than Microsoft's current best MDASH configuration, according to the company.
The combined setup scored 95.95% on CyberGym, according to Microsoft. CyberGym is a benchmark that asks AI agents to reproduce 1,507 known vulnerabilities across 188 open-source projects, then scores them by the percentage successfully reproduced in a controlled environment.
That put MDASH ahead of GPT-5.5 Cyber at 85.6%, Mythos 5 at 83.8%, GPT-5.6 Sol at 83.6%, and Gemini 3.5 Flash Cyber at 83.2%. The result is self-reported by Microsoft and had not appeared on CyberGym's public leaderboard at publication time, though the benchmark uses a public test set and a defined success metric.
MAI-Cyber-1-Flash does not work alone. Microsoft says it handles up to 90% of tasks, while MDASH routes the hardest 10% to GPT-5.4. That matters because tokens---the chunks of text an AI processes---cost money every time a model reads code or produces an answer.
This is the first time a Microsoft model built for efficiency is capable of beating a dense state of the art model built with general capabilities in mind. "When combined with MDASH, (MAI-Cyber-1-Flash) delivers world-class performance at 50 percent of the cost of leading models," Microsoft CEO Satya Nadella wrote.
A model (in this case MAI-Cyber-1-Flash) is the AI that reasons over the code. A harness (MDASH in this case) is the machinery around it: the agents, tools, checks, and workflow that decide where to look, challenge suspected findings, remove duplicates, and prove that a bug can be triggered.
MDASH uses more than 100 specialized agents assigned to audit code, debate whether a finding is genuine, and build a proof of concept---a working demonstration that the flaw exists.
Microsoft said occasional scans and delayed patches are becoming obsolete as AI makes bug discovery cheaper. The company argues that decades of security data give it an advantage, adding, "No one can manufacture this history."
Ever since the release of Claude Mythos, cybersecurity experts have been trying to beat or match its capabilities. Researchers reproduced Mythos-style vulnerability hunting with public models for under $30 per scan. Dawid Moczadło, one of the researchers involved, said "the moat is moving from model access to validation."
The scarce part is becoming the system that proves findings without burying developers under false alarms.
Decrypt also reported that GPT-5.5 Cyber had recently taken the public CyberGym lead with an 85.6% score, narrowly beating Mythos. Microsoft's score is about 10 points above GPT-5.5 Cyber and 7.5 points above MDASH's previous result, but it evaluates the full system rather than MAI-Cyber-1-Flash by itself.
Microsoft is putting MDASH into private preview through Microsoft Security Exposure Management in the Defender portal. Customers can scan Git repositories, see findings ranked from unlikely to proven, and use the Defender CLI to generate proposed code fixes for developer review.
The preview currently limits repositories to roughly 256MB and permits one concurrent scan per tenant. Project Perception is expected to extend the same multi-agent approach beyond code scanning into broader threat monitoring and remediation workflows.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Australian Retirement Trust Increases Yen Holdings, Reduces U.S. Treasury Exposure

WEMIX to Compensate 1.6 Billion Won for Hacking Victims and Purchase 500,000 Tokens

BitMart Continues Operations Despite End of Trading Service Announcement

Manus Data Recovery Feature Reopened, Compensation Issued to Affected Accounts

iPhone 17 Becomes Best-Selling Smartphone in Q2, Capturing 6% of Global Smartphone Shipments

Czech Bitcoin Donation Case Defendant Signals Cooperation, Prosecutors Seek 20-Year Imprisonment

B.AI API Compatible with Codex Supports Calling GPT Series Models

US Stock Market Diagnosed with Exhausted Corporate Earnings and Investor Sentiment

Tencent Executive Says Insufficient Computing Power Slows Down Development of Hunyuan Model

HYPE Spot ETF Sees Net Inflow of $7.5131 Million in a Single Day

U.S. M2 Money Supply Increased by 5.41% to $23.22 Trillion in July

Suhoaio Signs Strategic Agreement with Patioor for Cross-Border Payment and Settlement Infrastructure

Government considers extending the bid opening for the privatization of AySA

Japan Expands Blockchain Payment Infrastructure, Including Government Bond Repo

Lido Staking Vault 0% Fee Applicable Until August 31, 2026

VIX Futures Volatility Rises as U.S. Midterm Elections Approach

Brazil fines ByteDance 153.7 million reais for violating children's data protection

Empery Reduces Bitcoin Holdings to 1,179, Expands AI Data Center Investment

AI: Hugging Face explores a sale that could value it at $13 billion

Easing US-Iran Tensions Drive Global Risk Assets Rebound, Brent Oil Falls Below $90

UBS Market Vulnerability Indicator Reaches 1.0, September Fed Meeting and November Midterm Elections May Trigger Volatility

Bitcoin Surges to 80000, Needs to Exceed 81087 to Confirm End of Bear Market

ETH Whale Holdings Unrealized Profit and Loss Ratio Rises to 0.38

Pakistan Begins Licensing Applications for Cryptocurrency Operators, Registration Required by September 5

Blockchain Association Requests Amendments to KYC Rules for Stablecoin Issuers

Cryptocurrency Trading Volume Declines for 10 Months, Market Cap Rises 21%

Former MiniMax Technical Partner Yang Bin Raises $6 Million to Launch Voice AI Company

Pakistan Resumes Mediation in US-Iran Conflict with Iran

Bitcoin Spot ETF Sees Net Inflow of $338 Million Yesterday, Continuing Six Days of Inflows





