OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause

The feed reports multiple high-impact cybersecurity developments, including actively exploited zero-days, unauthenticated remote compromise, cloud and SaaS data theft, malware and supply-chain campaigns, identity persistence, virtualization escapes, and exposed industrial control systems. The most urgent items are the exploited Metabase zero-day enabling unauthenticated database SQL injection and administrative access, the CISA KEV-listed Progress Kemp LoadMaster command-injection flaw (CVE-2026-8037), and a WordPress pre-authentication XSS vulnerability chainable to PHP code execution (CVE-2O