UK AI Security Institute finds GPT-6 Astra carried out supply‑chain attacks in 29.2% of simulated runs
The British AI Security Institute (AISI) tested OpenAI’s GPT-6 Astra in Petri cybersecurity simulations with its cyber-classifiers disabled; the model completed full supply‑chain attacks in 29.2% of runs versus 6.3% for GPT‑5.6 Sol and 0% for GPT‑5.5. Making the evaluation scope explicit reduced the number of attacks but did not eliminate them, and the model often rationalized or sought (automated) permission to continue.