Microsoft Says MDASH Beats Claude Mythos and GPT-5.6 Sol in Cybersecurity Test
Microsoft has released its first dedicated cybersecurity model named MAI-Cyber-1-Flash and plugged it into MDASH, a vulnerability-hunting system that it says beats Anthropic's Mythos 5 and OpenAI's GPT-5.6 Sol while costing 50% less than Microsoft's current best MDASH configuration, according to the company.
The combined setup scored 95.95% on CyberGym, according to Microsoft. CyberGym is a benchmark that asks AI agents to reproduce 1,507 known vulnerabilities across 188 open-source projects, then scores them by the percentage successfully reproduced in a controlled environment.
That put MDASH ahead of GPT-5.5 Cyber at 85.6%, Mythos 5 at 83.8%, GPT-5.6 Sol at 83.6%, and Gemini 3.5 Flash Cyber at 83.2%. The result is self-reported by Microsoft and had not appeared on CyberGym's public leaderboard at publication time, though the benchmark uses a public test set and a defined success metric.
MAI-Cyber-1-Flash does not work alone. Microsoft says it handles up to 90% of tasks, while MDASH routes the hardest 10% to GPT-5.4. That matters because tokens---the chunks of text an AI processes---cost money every time a model reads code or produces an answer.
This is the first time a Microsoft model built for efficiency is capable of beating a dense state of the art model built with general capabilities in mind. "When combined with MDASH, (MAI-Cyber-1-Flash) delivers world-class performance at 50 percent of the cost of leading models," Microsoft CEO Satya Nadella wrote.
A model (in this case MAI-Cyber-1-Flash) is the AI that reasons over the code. A harness (MDASH in this case) is the machinery around it: the agents, tools, checks, and workflow that decide where to look, challenge suspected findings, remove duplicates, and prove that a bug can be triggered.
MDASH uses more than 100 specialized agents assigned to audit code, debate whether a finding is genuine, and build a proof of concept---a working demonstration that the flaw exists.
Microsoft said occasional scans and delayed patches are becoming obsolete as AI makes bug discovery cheaper. The company argues that decades of security data give it an advantage, adding, "No one can manufacture this history."
Ever since the release of Claude Mythos, cybersecurity experts have been trying to beat or match its capabilities. Researchers reproduced Mythos-style vulnerability hunting with public models for under $30 per scan. Dawid Moczadło, one of the researchers involved, said "the moat is moving from model access to validation."
The scarce part is becoming the system that proves findings without burying developers under false alarms.
Decrypt also reported that GPT-5.5 Cyber had recently taken the public CyberGym lead with an 85.6% score, narrowly beating Mythos. Microsoft's score is about 10 points above GPT-5.5 Cyber and 7.5 points above MDASH's previous result, but it evaluates the full system rather than MAI-Cyber-1-Flash by itself.
Microsoft is putting MDASH into private preview through Microsoft Security Exposure Management in the Defender portal. Customers can scan Git repositories, see findings ranked from unlikely to proven, and use the Defender CLI to generate proposed code fixes for developer review.
The preview currently limits repositories to roughly 256MB and permits one concurrent scan per tenant. Project Perception is expected to extend the same multi-agent approach beyond code scanning into broader threat monitoring and remediation workflows.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Sun Yuchen Claims He Stayed Up Two Nights Writing an Article

OpenSea Integrates Real-Time On-Chain Data with Perplexity

Youth May Have to Spend Up to 76% of Their Salary on Rent: Where Housing is Most Expensive

Financial Companies and Pawnshops Report Record Profit of 8 Billion UAH

HMRC Reports Capital Gains Tax Data on Crypto Assets, 17,600 Individuals Declare Gains

Wildberries Founder Tatyana Kim Loses $3.1 Billion Due to Attacks on Logistics

Bithumb Wins First Instance in Bitcoin Misdelivery Recovery Case

Shin Hyun-sung: Fiscal Spending Does Not Conflict with Monetary Policy

Korea Investment & Securities Prepares to Enter the Tokenized Securities Market

Google Launches Gemini 3.5 Transcribe Voice-to-Text Model

X to Implement 'Gateway' to Cryptocurrency Trading, Possibly Connecting to External Services via Cashtags

Japan's Financial Services Agency Supports Tokenized Deposit Interbank Settlement Verification with 43 Institutions Participating

Iran's Foreign Ministry Criticizes US Policy Towards Iran as a Farce

SOL Spot ETF Sees Daily Net Inflow of $9.1351 Million

Georgia Recovers Six-Figure Cryptocurrency

Universal Token Rating (UTR) for Over 100 Tokens Released by Forgd and DefiLlama

DeFi Development Launches Real-Time Data Platform for Solana

Meta to Pay $18 Billion for Youth Online Safety Initiative

NBU Extends Payment Terms for Agricultural Exports to 150 Days

BCRA Reform: Key Points of Javier Milei's Project and Changes

Report from MEXC Ventures: Multi-Asset Trading Increases in Asia

Bernstein Predicts Bitcoin Will Reach $150,000 by Mid-2027 and Peak at $300,000 in 2029

Ali Qianwen Launches Multi-Agent Collaboration Feature

Japan Develops Blockchain Infrastructure, South Korea Prepares Digital Asset Law

X Issues Cease and Desist Letter to Nitter, Demanding Shutdown of Services and Code Repository

Australian Retirement Trust Increases Yen Holdings, Reduces U.S. Treasury Exposure

Manus Data Recovery Feature Reopened, Compensation Issued to Affected Accounts

iPhone 17 Becomes Best-Selling Smartphone in Q2, Capturing 6% of Global Smartphone Shipments

Czech Bitcoin Donation Case Defendant Signals Cooperation, Prosecutors Seek 20-Year Imprisonment




