8 ms·
MAI-Cyber-1-Flash inside MDASH
- sudo_cowsay 2mo agoI love how the discussion here isn't taking ms seriously lol
- drakythe 2mo agoIt is interesting, even the most random LLM model announcement gets plenty of discussion about the merits of the model or others, or the harness, or something. This one has like... 2 comments about the announcement itself and the rest of meta commentary on the announcement being clearly LLM written and availability.
- Fitzee_web 2mo agowow rlly nice topic
- LorenDB 2mo agoOpen weights, please? Otherwise Cisco's Antares models are more interesting to me.
- lucrbvi 2mo agoSeems like MAI models from Microsoft are not going to be open-weight soon, but they are sharing a lot of details in the making of these models, which is a weird position.
- tolugenius 2mo agoI think the idea is show in-house progress and perhaps position MAI models as the "microsoft office of AI." My take is they might open source models 2-3 release cycles later, given this is supposed to be some new product line.
- SwellJoe 2mo agoThey haven't even released the "big" version of Anteres, yet (and the "big" version is only 3B, so there's no way it's competitive with general purpose frontiers for vulnerability research). It seems like a research project. Maybe it's good for rapid triage and CI usage, but almost certainly not at all useful for general "find bugs" usage.
- solenoid0937 2mo ago[flagged]
- behole 2mo ago[flagged]
- zurfer 2mo agoIt looks cool but how can I use it? Somehow i don't want to go hunting for access through the rabbit hole that is Microsofts Corporate blog.
- fallingbananna 2mo agoMAI-Code-1-Flash is available via GitHub Copilot. I wouldn't be surprised if they added MAI-Cyber 1 there too.
- cbg0 2mo agoI would, most of these cybersecurity models have not been made available to the public and the larger models have guardrails in place for certain cybersecurity tasks unless you've been specifically approved.
- deleted 2mo ago[deleted]
- bvttf 2mo agoYou probably can't, they say they're adding it to MDASH, which is (I think) still in a limited preview: https://www.microsoft.com/en-us/security/blog/2026/05/12/defense-at-ai-speed-microsofts-new-multi-model-agentic-security-system-tops-leading-industry-benchmark/ https://www.microsoft.com/en-us/security/blog/2026/05/12/def...
- adrian_b 2mo agoYes, it says: "Sign up to join the private preview"
- SwellJoe 2mo agoAll the US companies are keeping their "cyber" models locked down for special customers. So, it seems like anyone who isn't at a Fortune 500 or whatever qualifies for access, will be using Chinese models for vulnerability research.
- eat 2mo ago[flagged]
- low_tech_punk 2mo ago> Three things matter today: Model. Data. Harness. *knee jerk*
- testdelacc1 2mo agoGuys, I just had a brilliant idea. Hear me out. What if … I wrote the release post of the model with the model itself???
- smallmancontrov 2mo agoTo whoever got rid of the emoji bullet points: if we ever meet, I owe you a beer. Keep up the good work.
- cmrdporcupine 2mo agoIt's bad enough the cringe-word "cyber" being tossed around willy nilly. Now it's robots doing the tossing, in Claude-slop sentences. (Having lived through the late 90s .com stuff, I can't see the word "cyber" without immediately assuming the person who wrote it is a clueless baby boomer. Unfortunately it seems to have become accepted into the lexicon. I guess by us now-clueless GenXers?)
- bigfishrunning 2mo ago
- thallavajhula 2mo agoIs it just me or do all the proprietary AI model companies have their blogs styled to have earthy calming tones? This seems like a strategy. Exhibit A-C A. https://claude.com/blog https://claude.com/blog B. https://microsoft.ai/news/introducing-mai-cyber-1-flash-inside-mdash/ https://microsoft.ai/news/introducing-mai-cyber-1-flash-insi... C. https://cursor.com/grok https://cursor.com/grok Only OpenAI's blog looks like the WordPress _Twenty Twenty Five_ theme.
- caminanteblanco 2mo agoThe Gemini team uses the standard Google blue and white, which I would have thought Microsoft would be inclined to do as well
- udbhavs 2mo agoNot surprising considering out of all the things MS is known for, UX consistency is certainly not one of them. They have probably the weakest commitment to a design language across all the big tech cos.
- deleted 2mo ago[deleted]
- bztzt 2mo agoMAI is supposed to have its own design language/brand identity that is unrelated to the overall Microsoft brand. It has its own fonts, logo, colors, etc. The weird thing is that consumer Copilot, which is (or was) developed at MAI (as opposed to business/M365 Copilot which is developed in Redmond and designed based on the regular Microsoft stuff) also has its own design language which is different from the regular Microsoft stuff and different from the MAI stuff. tbh all of this has always struck me as an ego thing from the MAI team, who are mostly based in Silicon Valley, not Redmond, and think of themselves as too cool for Microsoft
- udbhavs 2mo ago
- nttylock 2mo ago[flagged]
- bflesch 2mo agoI can't even joke about Microsoft, I just feel pity for them. So long at the game and reduced from a dominating software house to slop fabric with no professional honor to deliver a product with certain quality level. Their cash cow customers are doofuses that decide over government contracts to be wined & dined, their best employees use macbooks, it's a sad shell of what has been.
- mherkender 2mo agoI think Microsoft is the terminal state of a big tech company. Big tech companies will all eventually carcinize into Microsoft given enough time.
- Oras 2mo agoTake anything from Microsoft with grain of salt. Remember Phi? They can’t decide on naming their product in Azure, let alone creating something useful or usable
- samuelknight 2mo agoPhi was cool for what it was. But it's not 2024 anymore.
- weberer 2mo agoRemember Tay AI? https://knowyourmeme.com/sensitive/memes/sites/tay-ai https://knowyourmeme.com/sensitive/memes/sites/tay-ai
- paulmist 2mo agoI love this video on Tay https://www.youtube.com/watch?v=HsLup7yy-6I https://www.youtube.com/watch?v=HsLup7yy-6I
- vessenes 2mo agoPhi was smart (or had a smart training architecture, more precisely), and arguably pushed the conversation forward globally on the value of curated training data.
- shmed 2mo agoPhi was pretty revolutionary for its time. The accompanying paper https://arxiv.org/abs/2306.11644 https://arxiv.org/abs/2306.11644 has been pretty instrumental in pushing the idea of highly curated synthetic dataset to train model. The lead scientist behind Phi-1 is now VP at OpenAI and leading their own synthetic training dataset effort.
- gste 2mo ago> Data. Our deepest advantage. Decades of building world-class security systems now give us trillions of daily signals across identity, endpoint, cloud, and network, and an unmatched record of real exploits and remediations. No one can manufacture this history. If I'm being frivolous, does this mean Microsoft's model is best at fixing Microsoft products because they have trillions of data points on problems with Microsoft products
- tolugenius 2mo ago> does this mean Microsoft's model is best at fixing Microsoft products "You're absolutely right, I shouldn't have delete your entire C drive. That's on me." In serious, this would be a good advantage for Microsoft to consider, I just doubt they'd do it well.
- risyachka 2mo agoConsidering they can't fix their login for decades, I am with you on this one
- theDoug 2mo agoI do hope they also use it to that effect.
- wtfHN26 2mo ago> If I'm being frivolous, does this mean Microsoft's model is best at fixing Microsoft products because they have trillions of data points on problems with Microsoft products Do they want to fix Microsoft Products ? My laptop came with Windows 11. Windows update broke hibernate few weeks back. When laptop gets out of hibernate - Wifi works for a few minutes and then once in a while the Wifi Adapter isn't detected. I need to reboot to fix the issue, this has screwed up my workflow. Wasting a lot of time. After troubleshooting a lot, I now only hope one day it gets fixed on it's own thanks to some new update. If Microsoft has money to invest in AI models, they could sure fix Windows 11 which I assume is one of their core products. I wish in a few years Microsoft realize that screwing over their Desktop users to chase Cloud and AI wasn't worth it. And by that time it's too late to get back the user base.
- mawadev 2mo agoI love this pretentious design the Ai people use on their websites, its pleasing to the eye
- udbhavs 2mo agoI've been noticing the uptick of beige + serif fonts + art with rough textures in this space. It feels like an attempt to humanize the technology and make it more palatable to people. Anthropic is the biggest example of this language with its ads and promotions. Edit: I'm enjoying seeing all the other examples linked in the responses. I decided to make a public Semble collection (https://semble.so/profile/vadhub.bsky.social/collections/3mrnor4up7z2r https://semble.so/profile/vadhub.bsky.social/collections/3mr...) to track more, feel free to add to this!
- threetonesun 2mo agoIt's very corporate hotel chain lobby restaurant inspired, which probably resonates with the C-suite people signing the checks on this stuff.
- NicuCalcea 2mo agoThe Microsoft AI homepage mentions "human" or a variation of it 15 times, including in the tagline.
- ReactiveJelly 2mo agoThat's no good, I need cybersecurity for groundhogs
- pranshuchittora 2mo agoWTH is this sloppy UI design
- dkeners 2mo agoI know... Hovering over Accessibility Mode in the bottom left displays like it is clickable, but alas, only the tiny off button inside the pill is really clickable. I clicked on the text one too many times before realizing it wasn't actually selectable...
- drevil-v2 2mo agoThis feels like it was written by Claude. I noticed several "it's not x, not y, it's z" claude-isms in the blog post. And I am 90% sure that Claude design was used to build the website.
- debesyla 2mo agoIt also can be human author, influenced by LLM writing. Though I'm not sure which is worse.
- saadn92 2mo agowe have a lot of upper management using AI to write their messages now and it's pretty obvious. not sure how I feel about it.
- drevil-v2 2mo ago> not sure how I feel about it Same. I feel amused, disgusted and disdain at the same time. Sprinkle in some irritation that even for a big product launch not a single human in the chain could be bothered to sit down and devote their attention to writing a page on why this product matters and why we should care..
- saadn92 2mo agoExactly, it just comes down to do you really care about what you’re writing about? If you’re using AI, most likely not. Thanks for chiming in
- antondd 2mo agoIgnoring my first immediate knee-jerk reaction to the blog and taking it at face value - I do tend to agree with Alex Karp on data becoming the moat for enterprises. Hyperscalers and the like are not different - it makes 0 sense to make swaths of business’s alpha available to potential future competitors. Even if MS and OAI are “friends”. Balkanization of cyber seems inevitable.
- tty46 2mo agocurious-- does anyone have experience with the remediation capabilities of MDASH? they mention it a few times, but the test on CyberGym only gives me pause-- that is only for creating POCs, nothing to do with creating patches.
- chvid 2mo agoHow much of this security related stuff is open source? Models, training data, evaluation benchmarks?
- tesdinger 2mo ago> Decades of building world-class security systems now give us trillions of daily signals across identity, endpoint, cloud, and network Let's say i use a linux endpoint and some hardware vendor starting with Cisc on the network. Can your product help me or not? I'm pretty sure none of these have been meant by Microsoft..but they fall into this category
- ecshafer 2mo agoAzure is the second largest cloud, and run majority linux. So probably.
- jhickok 2mo agoMicrosoft's security suite has been available for Linux for a long time, so I would imagine they have a tremendous amount of data. Sentinel connectors have been available for Cisc- since the beginning.
- tesdinger 2mo agoDoes it work on Linux
- danieltk76 2mo agothe problem is they are using cybergym, which has been saturated for a few months now.
- TheOtherHobbes 2mo ago"...talent-dense..." [wince]
- lanyard-textile 2mo agoThe year is 2026. We invented AGI. There is a transparent 20px gap above the opaque screen-fixed header.
- beyonddream 2mo agoI wish they took some time to reflect on how best to name a model. Like, would it make sense to add the model version at the end like every other artifacts labelled in software engineering!
- ooterness 2mo agoAll these different names and version numbers are too confusing. Just name every single model "Copilot". /s
- bonoboTP 2mo agoPoking one hole in the walls will always be easier than guarding the entire frontier. To defend properly, you need either either much more formally mathematically verified layers, or always-on online monitoring and intrusion detection running alongside the service. Like the immune system, or like guarding an empire's borders, since you can't put a guard on every meter of border. But you can detect when someone broke in and deploy your soldiers to respond. Currently we are trying to defend by building really hard walls that we hope cannot be pierced anywhere, which isn't realistic.
- rebirth01 2mo ago[flagged]
- neet_dev 2mo ago[dead]
- luciana1u 2mo ago[flagged]