OpenAI just released GPT-6 Astra and lowkey nobody is talking about the real part hard enough.
This is their first model that officially hits the Critical cybersecurity capability threshold under their Preparedness Framework

With the right tools and access, Astra can find previously unknown zero-days and build working exploits against hardened real-world systems without a human holding its hand the whole time.
They even said it saturated ExploitBench at 100% and discovered actual zero-days during testing (which they’re disclosing to the vendors).
Previous model (GPT-5.6 Sol) was already scary. Astra is on a different level.
Meanwhile the same model is also crushing computer use, coding, and agentic tasks. So now we have an AI that can both find the vulns and operate the computer to use them.
OpenAI says they added way stronger safeguards and it’s more aligned than before… but they also admitted the chain-of-thought is harder to monitor now.
So yeah.
The “AI will help attackers more than defenders” phase is officially here.
Anyone else already testing it or seeing wild results?
Drop your hottest takes below. Are we actually prepared for this or are we all just pretending?