Securitylab•September 8, 2026•🇷🇺Translated from Russian

GPT-6 Astra Shows Strong Tool Use and Math Results but Trails in Text Quality Tests

OpenAI introduced GPT-6 Astra on 3 September 2026 as a model designed for extended tasks that require maintaining goals, using tools and correcting intermediate errors across code, documents and computer interfaces.

In early demonstrations the model controlled a pixel display on a Divoom Bluetooth speaker, configured a CRM system through a browser and built an editable three-dimensional house scene in Blender before transferring it to Unreal Engine 5.

Independent evaluations released by 7 September present a more nuanced view. Artificial Analysis Intelligence Index 4.2 placed Astra second behind Claude Fable 5.1, while Epoch AI Epoch Capabilities Index ranked it first at 169 points with a 165–174 confidence interval.

On coding benchmarks Astra led Kilo Terminal-Bench 2.0 with 79.3 percent tasks completed yet used roughly three times fewer tokens than GPT-5.6 Sol in Codex evaluations. In Real Python checks it correctly identified a non-existent function and performed an 11-line edit for $0.31 across five tasks.

Text quality remains a weaker area. On ToneBench Astra scored 1995 Elo in max mode, placing 30th and behind both Sol and Fable configurations. The model performed better at avoiding boilerplate language than at crafting strong openings.

Document and fact-handling tests showed progress. Astra achieved 33.2 percent fully completed tasks on GDP.pdf compared with 28.2 percent for Sol, and reduced hallucination rates on AA-Omniscience from 92 percent to 51 percent.

In mathematics FrontierMath Erdős saw Astra solve two previously open problems on a single attempt each, requiring 15–16 hours and roughly $230 per solution. Additional experiments solved five tasks under modified conditions at a total compute cost exceeding $220 000.

On ARC-AGI-3 the model reached 99.9 percent when using an OpenAI adapter that preserves reasoning state between calls, versus 62.7 percent in the standard configuration.

OpenAI classified Astra as Critical under its Preparedness Framework after the model scored 100 percent on ExploitBench and identified two previously unknown vulnerabilities during testing. The company also noted reduced ability to detect undesirable behaviour from reasoning traces and that asynchronous monitoring may allow actions to complete before intervention.

API pricing lists $10 per million input tokens and $50 per million output tokens for short context, with cache reads at $1 per million. Costs for completed work remain highly variable depending on environment, retries and human oversight required.

Related articles

Habr•AI Security

AI Agent Workflow Exceeds 100-Unit ERP Limit Reaching 120 Due to Check-Then-Act Race Condition

A detailed case study demonstrates how an AI workflow authorized to order no more than 100 units of COMP-17 ended up creating 120 units across three suppliers. Each individual order of 40 units passed authorization checks returning ALLOW, yet the cumulative result violated the human-delegated mandate. The root cause was a classic check-then-act race condition where stateful permission tracking read the same initial balance concurrently before any updates occurred. Sequential stateful checks prevented the overrun, but concurrent execution allowed all three requests to read zero consumption and receive ALLOW. An improved design using PostgreSQL SELECT FOR UPDATE performs atomic reservation of the grant balance before calling the ERP system, ensuring only two orders succeed and the third is rejected with DENY_CAPACITY. The experiment used a deterministic planner without any LLM to isolate the authorization mechanism from model reasoning quality. Five key questions are provided for production deployments involving cumulative business limits delegated to agents.

AntiMalware•AI Security

SECURITM Launches MCP Server for External AI Access to Security Data

SECURITM has introduced an MCP server that connects external AI assistants directly to its platform data on assets, risks, tasks, and metrics. This marks the first such implementation among Russian SGRC and SOAR systems. The open MCP protocol enables natural language queries about critical assets without owners, overdue tasks, or monthly metric changes without manual data export. Supported tools include GigaChat, Yandex solutions, Claude, ChatGPT, Cursor, and compatible local models. Access remains strictly read-only through dedicated tokens with optional IP restrictions. The feature is available in paid cloud and on-premise editions and complements the platform’s built-in AI assistant.

Habr•AI Security

One Year Left to Secure Systems as Open-Source GLM-5.3-Flash Enables Automated Cyber Attacks

Chinese company Z.ai Co. released GLM-5.3-Flash in August 2026, an open-weight model that achieves 84.5% on CyberGym and 54.4% on ExploitBench, matching or exceeding leading commercial LLMs in vulnerability discovery and exploitation tasks. The model runs locally on consumer hardware such as a single Nvidia DGX Spark or Apple M5 Mac Studio with 256 GB unified memory, allowing unrestricted use after abliterated versions remove safety alignments. Experts warn that LLM agents could soon scan and exploit zero-days across Windows, Linux, browsers, and messaging apps around the clock. Initiatives Project Glasswing (Anthropic-led) and Daybreak (OpenAI-led) are racing to patch critical vulnerabilities in open-source projects and critical infrastructure before the next generation of unrestricted models arrives. Organizations are advised to accelerate patch deployment, inventory supply chains, and adopt advanced LLMs defensively within the remaining one-year window.

Habr•AI Security

RFC 9421 and Open wbauth Protocol Accelerate AI Agents 5.5x by Replacing Anti-Detect Browsers with Cryptographic Signatures

A new open implementation of the IETF RFC 9421 HTTP Message Signatures standard called wbauth allows AI agents to authenticate using Ed25519 cryptographic signatures instead of resource-heavy anti-detect browser farms. The approach eliminates the need for Camoufox, Playwright, or AdsPower instances that consume 500 MB to 1.5 GB of RAM per process and require residential proxy pools. Benchmarks show cold start time dropping from 1744 ms to 5 ms, request time from 86.8 ms to 15.8 ms, and memory usage from 500 MB to 0.76 MB. The system uses three HTTP headers for signing and verification against a public key directory hosted on Cloudflare Workers and D1. Server-side validation at the WAF or edge involves fetching the public key, canonicalizing the message per RFC 9421, verifying the Ed25519 signature, and checking timestamps to prevent replay attacks. The npm package wb-auth@0.4.0 and PyPI package wbauth-sdk==0.4.0 provide ready-to-use signers for Node, Bun, Deno, Python httpx, and requests. The full source is available on GitHub under the MrKoriy/wbauth repository.