Datasette 1.0a39 and 0.65.4 security patches released after frontier-model audit
Simon Willison announced two security patch releases for Datasette: 1.0a39 for the alpha series and 0.65.4 for the stable 0.65.x family. The patches address issues reported by Sevban Dönmez and follow an extensive audit conducted using frontier models including Claude Fable 5.1, GPT-5.6, and GPT-6 Astra. Willison said the audit helped find subtle bugs and that security audits by frontier models will be incorporated into all development work going forward.
Coverage timeline
Simon Willison
Datasette 1.0a39 and 0.65.4 security releases Today we're releasing two new security patch versions of Datasette: 1.0a39 and 0.65.4 - one for the current alpha series and one for the stable 0.65.x family. These are security fixes which you should apply if you are running a Datasette instance on the public web - in particular if that instance mixes both public and private tables. Following issues reported by Sevban Dönmez , Alex Garcia and I ran an extensive audit of Datasette using Claude Fable 5.1, GPT-5.6, and GPT-6 Astra. We then spent almost a week collaborating on and reviewing the fixes. They helped find some very subtle bugs. We'll be incorporating security audits by frontier models into all of our development work going forward. Alex came up with a way of splitting the work which I found extremely productive: Alex Garcia and I worked together running and then responding to the audit, working in a shared private repository. For most of the issues we split the work: one of us wou
Related stories
OpenAI launches GPT-6 Astra, claims world's best computer use model
OpenAI announced GPT-6 Astra, its next-generation model focused on computer and browser use, claiming it is the world's most intelligent and aligned model. The company stated Astra was built on its largest training run using over 100,000 GPUs at the Stargate facility, and in tests it outperformed humans in tasks like booking DMV appointments and searching job listings. OpenAI president Greg Brockman declared 'Welcome to the AGI era,' though the model's capabilities and limitations are still being assessed by developers.
23 reports · 9 sources515 points · 162 comments
OpenAI rolls out GPT-6 Astra broadly, priced at $10/$50 per million tokens
OpenAI began rolling out GPT-6 Astra on September 3, 2026, initially to a limited set of organizations and Daybreak cybersecurity platform customers, then expanding to all Pro, Enterprise, and Business Premium users and the API by September 5. The model is priced at $10 per million input tokens and $50 per million output tokens, matching Anthropic's Claude Fable 5.1, and scores 99.9% on ARC-AGI 3 with a custom harness. CEO Sam Altman apologized for the 'messy' initial rollout that locked out some paying users, while the company touted the model as a 'generational leap' and the start of 'the AGI era.'
4 reports · 4 sources
OpenAI launches GPT-6 Astra, first model to hit Critical cyber threshold
OpenAI announced GPT-6 Astra, its first model to reach the Critical cybersecurity capability threshold under its Preparedness Framework. The company plans to release a version publicly soon, but will limit advanced cyber capabilities to select partners. Reports indicate Astra uses 'recurrent depth' to improve cost and performance, though it obscures reasoning and may flag legitimate activity as misuse.
8 reports · 4 sources176 points · 101 comments
OpenAI releases GPT-5.6-Cyber, expands Daybreak with Blue/Red tiers and AWS Bedrock availability
OpenAI released GPT-5.6-Cyber, a more cyber-permissive version of GPT-5.6 Sol, to vetted partners as part of its expanded Daybreak cybersecurity initiative. The program now has two tiers: Daybreak Blue for frontier models and Daybreak Red for purpose-trained cybersecurity models. OpenAI and AWS also announced that Daybreak models are available on Amazon Bedrock for enterprise security workflows.
4 reports · 3 sources
News updates every hour. Subscribe in your RSS reader to get new stories automatically.
Subscribe