微软发布首个网络安全模型MAI-Cyber-1-Flash，配合MDASH系统在CyberGym基准上取得95.95%的漏洞复现准确率，远超第二名GPT-5.5 Cyber的85.6%。MDASH协调超过100个专业智能体，通过Project Perception提供完整安全方案，成本仅为领先模型的50%。
Microsoft is reporting 95.95% on CyberGym for its MDASH configuration.
CyberGym measures whether AI agents can reproduce real software vulnerabilities from code.
The next-best result shown is GPT-5.5 Cyber at 85.6%. Gemini 3.5, GPT-5.6 Sol, and Mythos 5 all sit around 83% to 84%.
MAI-Cyber-1-Flash is the AI model. MDASH is the larger agent-and-orchestration system that uses it. It coordinates more than 100 specialised agents and gives them different roles, tools, prompts and stopping rules.
If it really works, it can automate the slow, expensive work of finding and fixing hidden flaws in huge codebases.
The harness, security context, signals, and action space are kept separate from the model family.
In principle, that makes the underlying model replaceable. Microsoft can introduce a cybersecurity-specific model, combine it with another model where needed, and keep the surrounding investigation and remediation workflow intact.
One particular sentence in their official blog is particularly interesting.
"Microsoft sees more than 100 trillion security signals every day"
Today, we are announcing a series of updates that give customers frontier-grade security at half the cost. MAI-Cyber-1-Flash is our first cybersecurity model, built ground up to find the most challenging vulnerabilities in complex code bases. When combined with MDASH, it delivers world-class performance at 50 percent of the cost of leading models. We are bringing this capability to market through Project Perception, a complete agentic security offering grounded in real-world signals and security workflows. Teams of specialized agents work together to simulate attacks, detect and triage/investigate, and fix and remediate. This is the benefit of building the harness, context/signals, and action space separate from one model family. By combining specialized models and data with the right agents, tools, security context, and harness, we can advance the frontier of cost to outcome.在 X 查看被引用的帖子
来源：Rohan Paul · x.com