Microsoft unveils MAI-Cyber-1-Flash, says MDASH tops Mythos and GPT-5.6 Sol on CyberGym
Microsoft has introduced MAI-Cyber-1-Flash, its first dedicated cybersecurity model, and integrated it into MDASH, the company’s vulnerability-hunting system. Microsoft said the combined setup scored 95.95% on the CyberGym benchmark, ahead of GPT-5.5 Cyber at 85.6%, Anthropic’s Mythos 5 at 83.8%, OpenAI’s GPT-5.6 Sol at 83.6%, and Gemini 3.5 Flash Cyber at 83.2%. The company also said the new configuration delivers that result at half the cost of its current best MDASH setup. CyberGym asks AI agents to reproduce 1,507 known vulnerabilities across 188 open-source projects and scores them by successful reproduction rate in a controlled environment. Microsoft said MAI-Cyber-1-Flash handles up to 90% of tasks, while MDASH routes the hardest 10% to GPT-5.4. The result was self-reported and had not appeared on CyberGym’s public leaderboard at publication time. Microsoft is rolling out MDASH in private preview through Microsoft Security Exposure Management in the Defender portal. Customers can scan Git repositories, review findings ranked from unlikely to proven, and use Defender CLI to generate proposed code fixes. The preview currently caps repositories at roughly 256MB and allows one concurrent scan per tenant.







