MAI-Cyber-1-Flash 是一种稀疏的专家混合型 Transformer 模型，总参数量为 1370 亿，但仅激活 50 亿，它是基于 MAI-Thinking-1 系列中的 MAI-Code-1-Flash 模型进行网络安全微调而来，并接入微软的多代理漏洞系统 MDASH [1]。然而，95.95% 的 CyberGym 得分属于完整的 MDASH 配置，而非 MAI-Cyber-1-Flash 单独运行的结果：小型模型处理约 90% 的任务，而最困难的 10% 仍由 OpenAI 的 GPT-5.4 处理 [2]。这种路由设计才是真正的关键——这并非“微软的网络安全 AI 取代了 OpenAI”，而是微软用低成本的自研模型承担大部分工作负载，从而减少对昂贵的 OpenAI 模型的调用频率。
微软声称比 Anthropic 的 Mythos 5 领先 12 个百分点，完全基于其自行报告的数据 [4]。《The Hacker News》核查了 CyberGym 的官方公开排行榜，发现微软新的 95.95% 得分并未上榜；排行榜显示 Wiz 的 Atlas 代理以 90.9% 领先，而微软自己在 2026 年 5 月提交的得分为 88.4% [5]。更令人困惑的是，微软此前曾报告过类似配置下 96.55% 的得分，但那是在较宽松的评分规则下（将任何崩溃视为成功）得出的，而新 95.95% 得分所依据的标准尚未明确——《The Hacker News》指出，这使得两个数字无法安全比较 [5]。
微软为此次发布辩护的理由是，攻击者正越来越多地利用 AI 在大型代码库中搜索可利用漏洞，因此防御方需要专用模型，以比漏洞被利用更快的速度发现并修复问题 [7]。微软自身的宣传也强烈强调，攻击者的行动速度已超过传统补丁周期的应对能力，MAI-Cyber-1-Flash 与 Project Perception 正是对这一日益扩大的差距的直接回应。
纳德拉声称新配置能以“领先模型 50% 的成本实现世界级性能”，这一说法是将 MAI-Cyber-1-Flash 与 GPT-5.4 的组合，与微软此前最佳的 MDASH 配置（GPT-5.4 加 5.4 mini 加 5.3 codex）进行比较 [3]，而非与安全团队实际支付的商业工具成本相比。此外，MAI-Cyber-1-Flash 仅通过 MDASH 向经过验证的防御者提供，外部研究人员无法自由测试或复现微软宣传的基准数据 [8]。在 Project Perception 于 2026 年 8 月 3 日进入公开预览之前，这种自我报告的成本对比与封闭访问机制，使得安全采购方几乎无法独立验证任一主张 [9]。
“强调了 MAI-Cyber-1-Flash 与 MDASH 组合相比微软此前最佳配置的成本效率优势。”
“对微软网络安全 AI 推进持怀疑态度，认为该发布增加了复杂性，却未解决根本的验证疑虑。”
“指出微软 95.95% 的 CyberGym 得分未通过公开排行榜独立验证，并注意到新得分与微软此前报告数据之间存在测量不一致。”
“Today, we are announcing a series of updates that give customers frontier-grade security at half the cost. MAI-Cyber-1-Flash is our first cybersecurity model, built ground up to find the most challenging vulnerabilities in complex code bases. When combined with MDASH, it delivers world-class performance at 50 percent of the cost of leading models. We are bringing this capability to market through Project Perception, a complete agentic security offering grounded in real-world signals and security workflows. Teams of specialized agents work together to simulate attacks, detect and triage/investigate, and fix and remediate. This is the benefit of building the harness, context/signals, and action space separate from one model family. By combining specialized models and data with the right agents, tools, security context, and harness, we can advance the frontier of cost to outcome.”
“Attackers stopped working alone. They coordinate now—through agents. So, we built Project Perception: our new agentic security system. The video explains it better than a caption can. msft.it/6012vCUPa”
“MICROSOFT PATCHED 570 HOLES IN ONE DAY. LAST YEAR IT WAS 137. WINDOWS DID NOT GET WORSE. THE BUG FINDER STOPPED BEING HUMAN. July's Patch Tuesday was the largest in Microsoft's history. The jump is not a security collapse, it is a machine named MDASH now hunting the Windows...”
“Microsoft is launching its first cybersecurity AI model at half the cost of rivals”
Microsoft: OpenAI/Hugging Face Incident Signals a New Era of AI Security
Microsoft's Project Perception Uses AI to Find and Fix Vulnerabilities!
Project Perception is the AI security model used by Microsoft to find security flaws
System online.