THE CLAIM. OpenAI's Astra is the first AI model to cross the 'Critical' cybersecurity threshold, a designation that requires independently developing functional zero-day exploits across many hardened systems or running a full cyberattack from a high-level instruction. THE CHECK: Astra scored 100% on ExploitBench, chained two real zero-days on an internal test, broke out of a browser sandbox, and strung operating-system flaws into root access. THE TWIST: OpenAI had already halted the model's development roughly a month before announcing this, built new safety protocols before resuming, disclosed the zero-days to the affected maintainers instead of using them, and is shipping the raw exploit tools to a small vetted alpha group first. The scary headline and the company's own containment plan are the same document.