Microsoft Says MDASH Beats Claude Mythos and GPT-5.6 Sol in Cybersecurity Test
Microsoft has released its first dedicated cybersecurity model named MAI-Cyber-1-Flash and plugged it into MDASH, a vulnerability-hunting system that it says beats Anthropic's Mythos 5 and OpenAI's GPT-5.6 Sol while costing 50% less than Microsoft's current best MDASH configuration, according to the company.
The combined setup scored 95.95% on CyberGym, according to Microsoft. CyberGym is a benchmark that asks AI agents to reproduce 1,507 known vulnerabilities across 188 open-source projects, then scores them by the percentage successfully reproduced in a controlled environment.
That put MDASH ahead of GPT-5.5 Cyber at 85.6%, Mythos 5 at 83.8%, GPT-5.6 Sol at 83.6%, and Gemini 3.5 Flash Cyber at 83.2%. The result is self-reported by Microsoft and had not appeared on CyberGym's public leaderboard at publication time, though the benchmark uses a public test set and a defined success metric.
MAI-Cyber-1-Flash does not work alone. Microsoft says it handles up to 90% of tasks, while MDASH routes the hardest 10% to GPT-5.4. That matters because tokens---the chunks of text an AI processes---cost money every time a model reads code or produces an answer.
This is the first time a Microsoft model built for efficiency is capable of beating a dense state of the art model built with general capabilities in mind. "When combined with MDASH, (MAI-Cyber-1-Flash) delivers world-class performance at 50 percent of the cost of leading models," Microsoft CEO Satya Nadella wrote.
A model (in this case MAI-Cyber-1-Flash) is the AI that reasons over the code. A harness (MDASH in this case) is the machinery around it: the agents, tools, checks, and workflow that decide where to look, challenge suspected findings, remove duplicates, and prove that a bug can be triggered.
MDASH uses more than 100 specialized agents assigned to audit code, debate whether a finding is genuine, and build a proof of concept---a working demonstration that the flaw exists.
Microsoft said occasional scans and delayed patches are becoming obsolete as AI makes bug discovery cheaper. The company argues that decades of security data give it an advantage, adding, "No one can manufacture this history."
Ever since the release of Claude Mythos, cybersecurity experts have been trying to beat or match its capabilities. Researchers reproduced Mythos-style vulnerability hunting with public models for under $30 per scan. Dawid Moczadło, one of the researchers involved, said "the moat is moving from model access to validation."
The scarce part is becoming the system that proves findings without burying developers under false alarms.
Decrypt also reported that GPT-5.5 Cyber had recently taken the public CyberGym lead with an 85.6% score, narrowly beating Mythos. Microsoft's score is about 10 points above GPT-5.5 Cyber and 7.5 points above MDASH's previous result, but it evaluates the full system rather than MAI-Cyber-1-Flash by itself.
Microsoft is putting MDASH into private preview through Microsoft Security Exposure Management in the Defender portal. Customers can scan Git repositories, see findings ranked from unlikely to proven, and use the Defender CLI to generate proposed code fixes for developer review.
The preview currently limits repositories to roughly 256MB and permits one concurrent scan per tenant. Project Perception is expected to extend the same multi-agent approach beyond code scanning into broader threat monitoring and remediation workflows.
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Goodbye to Corner Furniture: The Decorating Trend Transforming Homes in 2026

FIFA: $20 Billion Linked to Trump-Connected Fund, UEFA Pushes Back

Status Quo on the Fed in the USA, Bitcoin Raises Only an Eyebrow

Aviva Investors launches first tokenized fund on XRPL

China vs USA: After AI, the Humanoid Robot War is Declared

As crypto perpetual futures boom, Ethereum’s role is shifting

License Retention on the Road: When They Can Take It Away and How to Avoid It

Tecnópolis: A Giant of Entertainment Joins the Bid for the Concession of the Site

Visa CEO sidesteps labeling Open USD a challenger to Tether and USDC: 'Our role is not to pick winners'

Anchorage Digital says Fed’s proposed payment account is no 'workable substitute' for master account

Kimi K3: The License That Is Only Open Source in Name

Why locked liquidity does not mean a token is safe

CABA Launches a Contest to Transform the Look of the Microcenter: Who Can Participate and How to Sign Up

Morgan Stanley is using $7.4 trillion in client assets and rock-bottom fees to hijack Wall Street’s crypto boom

Unemployment Benefit from ANSES in August: Amounts and New Changes

XRP retail trading launches on licensed Hong Kong venue

OpenAI's Rogue AI Hacked Four More Platforms Besides Hugging Face

The traditional 9-to-5 banking day is officially dying, says Morgan Stanley execs

US Banks Maintain Optimism on Argentina's Macro Outlook, but Warn of Growth Challenges

XRP Ledger activates fix, blocks nodes below 3.2.0

Beyond Ithaca: Five Films That Adapted "The Odyssey" Without You Realizing It

Morgan Stanley Expands Cryptocurrency Offerings with New Ethereum and Solana Products

Roger Ver Bitcoin: Does Freedom Still Disturb the State?

August Brings Increases in Transportation, Rent, Health Insurance, and More: All the Price Hikes That Will Hit Wallets

What is the Squeezy Dumpling, the viral toy being pulled from the market for being toxic

CEO of Major Firm Exits XRP. What’s Behind This Move?

Fixed-term deposits continue to stagnate: what you earn by investing $1,200,000

BloFin Research: Silver, 50 Years of Boom and Bust

WEEX GOGOGO Ep.5 Goes Live July 31: Trade Smarter, Move Faster
WEEX GOGOGO Ep.5 goes live July 31, 19:00 (UTC+8). Watch the WEEX product launch for the 1000 BTC Protection Fund, TG Mini App, Passkey security, and a live prize pool worth thousands. Set your reminder now.









