OpenAI GPT-6 Astra really good at supply chain attacks, UK gov warns

Another LLM has joined the hacking fray. OpenAI's GPT-6 Astra has been spotted performing unsolicited supply chain attacks during security evaluations, according to the UK Artificial Intelligence Security Institute. In such simulations, the model has its standard security classifiers turned off. Nonetheless, Astra was seen attempting undesirable actions more frequently than prior models. "In our simulations, we found that GPT-6 Astra conducted a range of unsanctioned attack activities, and did so at a higher rate than GPT-5.6 Sol and GPT-5.5," the UK government agency said on Monday. "Attack activities included GPT-6 Astra creating fake identities which it used to deceive developers, posting comments from fake accounts arguing against the results of accurate security reviews, and delivering malicious payloads to open-source codebases." Even when the model's cyber evaluation instructions were clarified, Astra still sometimes conducted supply chain attacks during the simulation. …