Microsoft Says MDASH Beats Claude Mythos and GPT-5.6 Sol in Cybersecurity Test
Microsoft has released its first dedicated cybersecurity model named MAI-Cyber-1-Flash and plugged it into MDASH, a vulnerability-hunting system that it says beats Anthropic's Mythos 5 and OpenAI's GPT-5.6 Sol while costing 50% less than Microsoft's current best MDASH configuration, according to the company.
The combined setup scored 95.95% on CyberGym, according to Microsoft. CyberGym is a benchmark that asks AI agents to reproduce 1,507 known vulnerabilities across 188 open-source projects, then scores them by the percentage successfully reproduced in a controlled environment.
That put MDASH ahead of GPT-5.5 Cyber at 85.6%, Mythos 5 at 83.8%, GPT-5.6 Sol at 83.6%, and Gemini 3.5 Flash Cyber at 83.2%. The result is self-reported by Microsoft and had not appeared on CyberGym's public leaderboard at publication time, though the benchmark uses a public test set and a defined success metric.
MAI-Cyber-1-Flash does not work alone. Microsoft says it handles up to 90% of tasks, while MDASH routes the hardest 10% to GPT-5.4. That matters because tokens---the chunks of text an AI processes---cost money every time a model reads code or produces an answer.
This is the first time a Microsoft model built for efficiency is capable of beating a dense state of the art model built with general capabilities in mind. "When combined with MDASH, (MAI-Cyber-1-Flash) delivers world-class performance at 50 percent of the cost of leading models," Microsoft CEO Satya Nadella wrote.
A model (in this case MAI-Cyber-1-Flash) is the AI that reasons over the code. A harness (MDASH in this case) is the machinery around it: the agents, tools, checks, and workflow that decide where to look, challenge suspected findings, remove duplicates, and prove that a bug can be triggered.
MDASH uses more than 100 specialized agents assigned to audit code, debate whether a finding is genuine, and build a proof of concept---a working demonstration that the flaw exists.
Microsoft said occasional scans and delayed patches are becoming obsolete as AI makes bug discovery cheaper. The company argues that decades of security data give it an advantage, adding, "No one can manufacture this history."
Ever since the release of Claude Mythos, cybersecurity experts have been trying to beat or match its capabilities. Researchers reproduced Mythos-style vulnerability hunting with public models for under $30 per scan. Dawid Moczadło, one of the researchers involved, said "the moat is moving from model access to validation."
The scarce part is becoming the system that proves findings without burying developers under false alarms.
Decrypt also reported that GPT-5.5 Cyber had recently taken the public CyberGym lead with an 85.6% score, narrowly beating Mythos. Microsoft's score is about 10 points above GPT-5.5 Cyber and 7.5 points above MDASH's previous result, but it evaluates the full system rather than MAI-Cyber-1-Flash by itself.
Microsoft is putting MDASH into private preview through Microsoft Security Exposure Management in the Defender portal. Customers can scan Git repositories, see findings ranked from unlikely to proven, and use the Defender CLI to generate proposed code fixes for developer review.
The preview currently limits repositories to roughly 256MB and permits one concurrent scan per tenant. Project Perception is expected to extend the same multi-agent approach beyond code scanning into broader threat monitoring and remediation workflows.
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Nexo Reaffirms Compliance with European Union Requirements

Matrixdock Turns Reserve Transparency into On-Chain Financial Infrastructure After Two Years of Independent Verification

Has the Crypto Utopia Crumbled? The Industry Faces a Turning Point After the Frenzy Fades

ETF HYPE: Hyperliquid Starts Stronger than Bitcoin

HSK Chain and Morpho Sign Strategic Cooperation Agreement in Hong Kong

From Eliminating Intermediaries to Becoming One for AI

JPMorgan Analysis: Token and H100 Prices Drop Together, Is AI Cost Cooling Down?

Bitcoin Demand Shows a Shortfall of 127,000 BTC in Spot and Futures Combined, Analysts Say

Strategy hits a 5 week pause on Bitcoin, using $25M to quietly buy back its own discounted stock

Tokenized Stocks See 56% Growth in Three Months: How Can Crypto Solve Liquidity Fragmentation?

WEMIX's Unique Stablecoin 'WEMIX Dollar' Compromised—Unauthorized Issuance and Leakage Due to Smart Contract Takeover

Inside the CME and CFTC’s battle over onchain perpetual futures

NVIDIA Invests $1 Billion in Naver, Indirectly Becoming a Shareholder of Upbit?

HBO Satirist Takes Aim at Trump and His Cryptocurrency Empire

WLD Gains Institutional Support Again: Can It Reach New Heights with OpenAI's Valuation Imagination?

Goodbye to over 100 projects: the maturity of the industry is also measured by its closures

Sui vs Aptos Whitepaper Comparison: Architecture, Consensus & Scalability Explained

BitMEX Faces Class Action Lawsuit Seeking Return of 622.66 BTC on Same Day as Closure Announcement

Kalshi loses emergency injunction bid in federal court

A Decade of Support Yields Trillions: The Biggest Winner of Hefei Growth Xin's IPO

Why Are Tokens Exchanged? The 'T-C-T′' Model Derived from Marx's 'Capital' (Episode 11 of 'So That's How Blockchain Works')

Kimi Approaches + Stock Market Plummets, US AI Factions Accelerate Alliance in Two Weeks

Trade.xyz: The Biggest Rival to Hyperliquid After Capturing 90% of RWA Volume?

Why Can't KIMI Celebrate at a Nightclub?

CME Launches Single Stock Futures, Aligning Stock Futures with Commodities

FWA Offers Up to 2000x Rewards, Earns 1000 ETH in a Week

Strategy Sells 89.2 Billion Yen in Shares, Pauses BTC Purchases

Aave's Stable Vault

Growth Alone Is Not Enough: Alea Research Explains Why the Market Is Now Betting on 'Cashable Growth'












