Red Teaming

A lab has released apex-flash-1, an open-weights model post-trained for cybersecurity, and framed offensive security as an economics problem: cheap capable models plus harnesses plus compute make finding and exploiting vulnerabilities a scaling exercise. The self-reported claims ($1M in bounties, #1 on the HackerOne US leaderboard, trillions of tokens a month) are the team’s own, but the trend they describe is corroborated by Anthropic’s own threat reports of largely-automated intrusion campaigns. What is claim vs. signal, why the cost-to-breach is falling, and the concrete playbook for a security leader when attack becomes industrialised.

Claude-Red packages 78 offensive-security skills for Claude, with no built-in authorization check. The governance checklist to put in place first.

RedCell is an open-source AI agent that plans and runs a full penetration test with nmap, nuclei and Metasploit, then writes the report. How it works and its limits.

Abliterated models are LLMs with safety refusals surgically removed. What it means for your threat model, where the risk sits, and how to detect them.