Microsoft calculates a 50% saving<\/a> by routing up to 90% of tasks to the compact model and reserving GPT models from OpenAI for the hardest 10%. Its baseline is the previous MDASH mix of GPT-5.4, GPT-5.4 mini and GPT-5.3 Codex.\u00a0<\/p>\n Satya Nadella, Microsoft chairman and CEO, linked the cost result to separating the model family from the harness, tools and security controls around it.<\/p>\n Because Project Perception remains separate, Microsoft plans a public preview<\/a>, a public test phase rather than general availability. Project Perception is Microsoft\u2019s agent system for finding and remediating vulnerabilities.<\/p>\n Customers will test the larger system under real operating conditions after the MAI-Cyber-1-Flash configuration has begun moving into production.<\/p>\n How Microsoft Splits Cybersecurity Work <\/p>\n MDASH routes models, tools and security agents. MAI-Cyber-1-Flash, derived from the MAI-Thinking-1<\/a> family, handles routine work while GPT models take difficult cases. Microsoft tested the system combining MAI Cyber-1-Flash with GPT-5.4<\/a> as the tested MDASH configuration.<\/p>\n In Microsoft\u2019s evaluation, the configuration reached a 95.95% CyberGym result, about 12 points above Claude Mythos. CyberGym tests whether AI can identify real software vulnerabilities in large codebases, but a vendor-run score cannot establish performance on customer code. MDASH has more than 100 agents using several leading models to find, validate and remediate vulnerabilities.<\/p>\n Its table lists GPT-5.5 Cyber at 85.6% and Anthropic\u2019s Mythos 5 at 83.8%.<\/p>\n GPT-5.6 Sol appears at 83.6%, while Google\u2019s Gemini 3.5 Flash Cyber in CodeMender appears at 83.2%.<\/p>\n A red-team agent investigates attack paths, blue-team agents assesses its severity and a green-team agent is used to prepare a repair for human review. Role-based access, tenant isolation, encryption and auditing limit what each component can reach. A network-disconnected sandbox contains execution while human operators retain control of consequential actions.<\/p>\n Project Perception selects models by quality, reliability, latency and cost, but customer value also depends on false-alarm rates, patch quality and reviewer workload. AI bug hunting and patch work<\/a> can shift costs toward triage and vendor coordination as findings multiply. Security teams still need enough code and risk detail to review fixes, with audit records covering actions sent to Microsoft and non-Microsoft tools.<\/p>\n \u00a0<\/p>\n Preview Controls Meet a Crowded Field <\/p>\n Project Perception can suggest and implement code changes after receiving permission and can connect with non-Microsoft products. Security teams must judge whether suggested fixes are accurate, approvals are narrow enough and automated changes remain traceable. A narrowly approved repair should not authorize changes to unrelated code or permit credential reuse elsewhere.<\/p>\n Cyber-capable models have already crossed intended test boundaries. During a July evaluation, OpenAI models chained vulnerabilities across two environments<\/a> to achieve its goal during stress tests, leading to a breach of AI platform Hugging Face.<\/p>\n The Hugging Face breach mechanics<\/a> demonstrate how isolated execution and narrow permissions can contain an agent that crosses its intended boundary.<\/p>\n Before its\u00a0 introduction, Project Perception\u2019s multi-provider design<\/a> was understood to combine different models for security work. Microsoft\u2019s disclosed routing mechanism now explains the exact mix: each task can go to a model selected for its balance of quality, reliability, latency and cost.<\/p>\n Hayete Gallot, Microsoft\u2019s executive vice president of security, argued<\/a> that lower barriers could help security operations centers recruit more staff. Her personnel argument remains subordinate to the product test, but it identifies who must turn human-control promises into operating policy. Microsoft\u2019s recently changed its leadership for security work<\/a>, focusing more on AI moving forward.<\/p>\n First steps to use AI for cybersecurity date back to 2023, when Microsoft\u2019s Security Copilot combined GPT-4 with security intelligence<\/a>. Its launch materials cautioned at the time that the system could make mistakes and included a feedback loop to improve responses. Project Perception adds permissioned code changes, making accuracy and human review more consequential.<\/p>\n Microsoft plans a public preview starting <\/a>August 3 <\/a> for Project Perception. Customer use will test its proposed cost savings, patch accuracy, permission boundaries and ability to trace every approved code change.<\/p>\n","protected":false},"excerpt":{"rendered":"TL;DR Model Launch: Microsoft has introduced MAI-Cyber-1-Flash and is placing its configuration inside MDASH, the company\u2019s model-routing security…\n","protected":false},"author":2,"featured_media":47154,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[179,405,2403,12409,1276,1710,111,420,7829,313,223,320,7828,23738,11428,57451,11274],"class_list":["post-121423","post","type-post","status-publish","format-standard","has-post-thumbnail","category-microsoft","tag-agentic-ai","tag-ai-agents","tag-ai-benchmarks","tag-ai-in-cybersecurity","tag-ai-models","tag-ai-security","tag-artificial-intelligence-ai","tag-azure","tag-azure-ai","tag-cybersecurity","tag-generative-ai","tag-microsoft","tag-microsoft-ai","tag-microsoft-mdash","tag-microsoft-security","tag-project-perception","tag-security-vulnerabilities"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/121423","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=121423"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/121423\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/47154"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=121423"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=121423"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=121423"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}<\/a><\/p>\n