MAI-Cyber-1-Flash inside MDASH

193 points101 comments4 hours ago
gste

> Data. Our deepest advantage. Decades of building world-class security systems now give us trillions of daily signals across identity, endpoint, cloud, and network, and an unmatched record of real exploits and remediations. No one can manufacture this history.

If I'm being frivolous, does this mean Microsoft's model is best at fixing Microsoft products because they have trillions of data points on problems with Microsoft products

show comments
zurfer

It looks cool but how can I use it? Somehow i don't want to go hunting for access through the rabbit hole that is Microsofts Corporate blog.

show comments
bonoboTP

Poking one hole in the walls will always be easier than guarding the entire frontier.

To defend properly, you need either either much more formally mathematically verified layers, or always-on online monitoring and intrusion detection running alongside the service. Like the immune system, or like guarding an empire's borders, since you can't put a guard on every meter of border. But you can detect when someone broke in and deploy your soldiers to respond. Currently we are trying to defend by building really hard walls that we hope cannot be pierced anywhere, which isn't realistic.

eat

[flagged]

show comments
Oras

Take anything from Microsoft with grain of salt. Remember Phi?

They can’t decide on naming their product in Azure, let alone creating something useful or usable

show comments
tesdinger

> Decades of building world-class security systems now give us trillions of daily signals across identity, endpoint, cloud, and network

Let's say i use a linux endpoint and some hardware vendor starting with Cisc on the network. Can your product help me or not? I'm pretty sure none of these have been meant by Microsoft..but they fall into this category

show comments
LorenDB

Open weights, please? Otherwise Cisco's Antares models are more interesting to me.

show comments
beyonddream

I wish they took some time to reflect on how best to name a model. Like, would it make sense to add the model version at the end like every other artifacts labelled in software engineering!

drevil-v2

This feels like it was written by Claude. I noticed several "it's not x, not y, it's z" claude-isms in the blog post.

And I am 90% sure that Claude design was used to build the website.

show comments
lanyard-textile

The year is 2026.

We invented AGI.

There is a transparent 20px gap above the opaque screen-fixed header.

chvid

How much of this security related stuff is open source? Models, training data, evaluation benchmarks?

tty46

curious-- does anyone have experience with the remediation capabilities of MDASH? they mention it a few times, but the test on CyberGym only gives me pause-- that is only for creating POCs, nothing to do with creating patches.

thallavajhula

Is it just me or do all the proprietary AI model companies have their blogs styled to have earthy calming tones? This seems like a strategy.

Exhibit A-C

A. https://claude.com/blog B. https://microsoft.ai/news/introducing-mai-cyber-1-flash-insi... C. https://cursor.com/grok

Only OpenAI's blog looks like the WordPress _Twenty Twenty Five_ theme.

show comments
danieltk76

the problem is they are using cybergym, which has been saturated for a few months now.

TheOtherHobbes

"...talent-dense..."

[wince]

tesdinger

Does it work on Linux

antondd

Ignoring my first immediate knee-jerk reaction to the blog and taking it at face value - I do tend to agree with Alex Karp on data becoming the moat for enterprises. Hyperscalers and the like are not different - it makes 0 sense to make swaths of business’s alpha available to potential future competitors. Even if MS and OAI are “friends”. Balkanization of cyber seems inevitable.

bflesch

I can't even joke about Microsoft, I just feel pity for them. So long at the game and reduced from a dominating software house to slop fabric with no professional honor to deliver a product with certain quality level.

Their cash cow customers are doofuses that decide over government contracts to be wined & dined, their best employees use macbooks, it's a sad shell of what has been.

show comments
Fitzee_web

wow rlly nice topic

sudo_cowsay

I love how the discussion here isn't taking ms seriously lol

show comments
mawadev

I love this pretentious design the Ai people use on their websites, its pleasing to the eye

show comments
pranshuchittora

WTH is this sloppy UI design

show comments