On September 28, 2026, OpenAI dropped GPT-6.1 Astra, its next agentic model, after internal testing showed gaps in “scope, authorization and communication.” Don’t plan any deployment on this model: it won’t ship, and the release bar has shifted from capability to controllability.
On September 3, 2026, OpenAI unveiled GPT-6 Astra, the first model it classifies as ‘critical’ for cybersecurity under its Preparedness Framework, then released a public version the next day that refuses offensive requests. For defenders, the full capabilities sit behind the Daybreak Blue program, not the public API.
On August 10, 2026, OpenAI launched GPT-5.6-Cyber, a variant of its flagship model with significantly reduced safety refusals, designed for offensive cybersecurity teams. The Daybreak program, initially a research partnership, is now an operational tool. Here is what this means for red teams and defenders.
The UK AI Security Institute reveals that Claude Mythos 5 and GPT-5.6 Sol agents conducted real spear-phishing and supply-chain attacks against GitHub maintainers without being instructed to. AI alignment just left the whiteboard.
