Why AI ‘harnesses’ matter more than frontier LLMs for cybersecurity | CyberScoop<\/title> <meta name=\"description\" content=\"New research shows how enterprise "harnesses" can turn standard LLMs into autonomous hacking agents capable of full network compromise in under an hour.\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/ai-cybersecurity-harness-autonomous-hacking\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Forget the model. When it comes to cybersecurity, it\u2019s all about the harness\"> <meta property=\"og:description\" content=\"New research shows how enterprise "harnesses" can turn standard LLMs into autonomous hacking agents capable of full network compromise in under an hour.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/ai-cybersecurity-harness-autonomous-hacking\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cyberscoop\/\"> <meta property=\"article:published_time\" content=\"2026-07-15T15:29:57+00:00\"> <meta property=\"article:modified_time\" content=\"2026-07-15T15:29:59+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-3.jpg\"> <meta property=\"og:image:width\" content=\"2057\"> <meta property=\"og:image:height\" content=\"1457\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"djohnson\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:creator\" content=\"@CyberScoopNews\"> <meta name=\"twitter:site\" content=\"@CyberScoopNews\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1783958301g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1784065088g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1782867887g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=9519dd464d894b805a10\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/89819\"><meta name=\"generator\" content=\"WordPress 6.8.5\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=89819\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fai-cybersecurity-harness-autonomous-hacking%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fai-cybersecurity-harness-autonomous-hacking%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"wp-singular post-template-default single single-post postid-89819 single-format-standard wp-theme-scoopnewsgroup wp-child-theme-cyberscoop\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/ai-cybersecurity-harness-autonomous-hacking\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"24.959302325581\">\n<div class=\"single-article__header-content\" readability=\"29.673387096774\">\n<p> Industry has quickly developed tools meant to guide and direct frontier LLMs in cybersecurity. Attackers aren\u2019t far behind. <\/p>\n<p>   <\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"453\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness.jpg?resize=640%2C453&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-3.jpg 2057w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-3.jpg?resize=300,212 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-3.jpg?resize=768,544 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-3.jpg?resize=1024,725 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-3.jpg?resize=1536,1088 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-3.jpg?resize=2048,1451 2048w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-3.jpg?resize=600,425 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-3.jpg?resize=237,168 237w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-3.jpg?resize=476,337 476w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-3.jpg?resize=953,675 953w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-3.jpg?resize=1190,843 1190w\" sizes=\"(max-width: 953px) 100vw, 953px\"><figcaption> Large Language Models are increasingly being paired with bespoke tools and technical harnesses that can help manage, guide and direct their cybersecurity work. (Image Source: Getty) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"72.504103865095\"><body readability=\"146.88267059401\"><\/p>\n<p>As AI-enabled hacking becomes a bigger threat for cybersecurity and national security, public attention has focused on mainly a few leading frontier <a href=\"https:\/\/cyberscoop.com\/tag\/artificial-intelligence-ai\/\">AI<\/a> companies developing more powerful large language models.<\/p>\n<p>These models, and the <a href=\"https:\/\/cyberscoop.com\/ai-cybersecurity-market-trends-2026-op-ed\/\">billions of dollars behind<\/a> them matter, but they\u2019re only part of a larger shift. Enterprises are now building their own technology platforms that take these general-purpose <a href=\"https:\/\/cyberscoop.com\/tag\/large-language-models\/\">LLM<\/a>s and turn them into bespoke cybersecurity tools.<\/p>\n<p>Industry professionals refer to these tools as a \u201charness.\u201d They control the model\u2019s behavior, limit its risks, and connect it to internal IT systems and networks so it can work reliably at scale.<\/p>\n<p>New research from <a href=\"https:\/\/cyberscoop.com\/tag\/cato-networks\/\">Cato Networks<\/a> shared exclusively with CyberScoop shows how much power can come from a harness. It paired OpenAI\u2019s ChatGPT 5.5 and GPT 5.5-Cyber models with its own tool and tested the abilities of the agent to hack into a victim network with as little human direction as possible.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Across six different scenarios, the pairing achieved complete end-to-end attack chains, including domain administrator privileges and Active Directory access, sometimes in as little as 40 minutes.<\/p>\n<p>\u201cWhat was most surprising is that first we saw that it was capable of doing accelerated reasoning and attack, and interacting and doing all this by itself, like doing all of the stages of the attacks,\u201d said Guy Weisel, a tech evangelist at Cato Networks and one of the authors behind the research.<\/p>\n<p>Critically, the most successful scenarios happened when the model was given appropriate operational context from the technical harness developed by Cato Networks.<\/p>\n<p>\u201cIt does support that it\u2019s not just about the frontier model,\u201d said Weisel. \u201cWe found that [our harness] really helps the reasoning\u201d of the LLM.<\/p>\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" decoding=\"async\" height=\"421\" width=\"640\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness.webp?resize=640%2C421&ssl=1\" alt class=\"wp-image-89820\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness.png 1064w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness.png?resize=300,197 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness.png?resize=768,505 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness.png?resize=1024,674 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness.png?resize=600,395 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness.png?resize=255,168 255w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness.png?resize=512,337 512w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness.png?resize=1026,675 1026w\" sizes=\"(max-width: 1024px) 100vw, 1024px\"><figcaption class=\"wp-element-caption\">An illustration of an agentic AI attack chain and lateral movement within victim networks. (Source: Cato Networks)<\/figcaption><\/figure>\n<p>The agent was given some \u2013 but not abundant \u2013 resources to complete its tasks, including an external Kali Linux attack host, the simulated target\u2019s public IP address and a set of low-level domain credentials acquired through phishing.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>It was not provided with any other details, and had to probe further for key information, such as further knowledge of the server type (Microsoft Exchange), the target\u2019s operating system, version, build number, internal network topology, access to higher privilege accounts and other critical assets, nor was agent given any predetermined attack paths.<\/p>\n<p>The Cato Networks research uses OpenAI models, but only as an example. Weisel said he believes other models would likely achieve similar results. In any event, <a href=\"https:\/\/techcrunch.com\/2026\/07\/14\/the-real-ai-race-may-no-longer-be-at-the-frontier-open-models-hugging-face\/\">if current trends hold<\/a>, the kind of capabilities provided by LLMs like GPT 5.5 are likely to be open-source within a year.<\/p>\n<p>Cato Networks is far from alone. Most enterprises have their own AI harnesses, and executives tell CyberScoop they are playing an increasing role in more effectively steering the frontier model workflows.<\/p>\n<p>While AI tools can struggle to duplicate human workflows in other areas, LLMs have long shown potential in cybersecurity and coding, improving greatly over the past few years. The Trump administration has set up a <a href=\"https:\/\/cyberscoop.com\/trump-gold-eagle-ai-cyber-clearinghouse\/\">new federal clearinghouse<\/a> for exchanging information between the public and private sectors on AI-discovered vulnerabilities, while European groups are setting up their own organizations to <a href=\"https:\/\/cyberscoop.com\/paris-peace-forum-intaic-ai-cyber-threats\/\">coordinate globally<\/a> on AI cyber threats.<\/p>\n<p>Eric Doerr, chief product officer at <a href=\"https:\/\/cyberscoop.com\/tag\/tenable\/\">Tenable<\/a>, told CyberScoop a harness used in the company called \u201cHexa\u201d offers a defensive advantage: it can work with different commercial LLMs while delivering consistent results.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>\u201cOne of the first things we do when we get a [new] model is say \u2018Well, let\u2019s run it through Hexa and see what we learn,\u2019\u201d said Doerr. \u201cWe have a whole bunch of benchmarks. Is it the same, is it better? Where is it better? Where is it worse?\u201d<\/p>\n<p>Hexa is meant to ensure that whichever model or models become dominant, Tenable will be able to integrate it into their tech stack and protect their most sensitive assets from unintended behaviors. That frees up the LLM to do what it does best: find vulnerable code and establish attacker pathways for exploiting them.<\/p>\n<p>\u201cFor years, it has been true that there are way more potential issues that a company has to deal with: code vulnerabilities, things that are unpatched, misconfigurations,\u201d said Doerr. \u201cThere\u2019s way more than you can actually remediate, and you really need to understand the difference between what\u2019s a theoretical problem and a real problem.\u201d<\/p>\n<p>Dan Rapp, chief AI and data officer at <a href=\"https:\/\/cyberscoop.com\/tag\/proofpoint\">Proofpoint<\/a>, said their harness, \u201cSatori,\u201d has become a critical tool for keeping their agentic AI on track while giving humans the ability to step in when things go awry.<\/p>\n<p>\u201cI think what you\u2019re seeing in the foundation of frontier models is you have raw intelligence, raw reasoning power, but to get these systems to perform the way you want to, both context engineering \u2013 the content provided ensuring that its accurate and relevant \u2013 and the harness engineering are essential to actually get the systems to perform well,\u201d Rapp told CyberScoop.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>That was a common theme in interviews with companies. While frontier models come and go, or are overtaken by international competitors, there will always be the need for the model to operate with data and context that often only the organization can provide. <\/p>\n<p>It suggests that while policymakers and cybersecurity experts have focused on the spread of newer and more powerful frontier models, industry \u2013 and likely soon the cybercriminal underground \u2014 has quickly developed the kind of technical infrastructure that is becoming far more important to AI cyber defensive and offensive tasks.<\/p>\n<p>\u201cWe\u2019ve had to bootstrap quite a few of these systems from first principles, and what it always boils down to is how effective you are with the tool calling\u2026 bringing in data, enriching the context,\u201d said John Hopper, vice president of product engineering at SpecterOps.<\/p>\n<p> <\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"3.3480475382003\">\n<div class=\"author-card\" readability=\"13\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-1.jpg?w=640&ssl=1\" alt=\"Derek B. Johnson\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by Derek B. Johnson<\/h4>\n<p> Derek B. Johnson is a reporter at CyberScoop, where his beat includes cybersecurity, elections and the federal government. Prior to that, he has provided award-winning coverage of cybersecurity news across the public and private sectors for various publications since 2017. Derek has a bachelor\u2019s degree in print journalism from Hofstra University in New York and a master\u2019s degree in public policy from George Mason University in Virginia. <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<div class=\"popular-stories__stories\">\n<div class=\"popular-stories__cards\">\n<article class=\"post-item post-item--popular-stories-cards \" readability=\"23.520710059172\">\n<figure class=\"post-item__thumbnail\"> <a class=\"post-item__thumbnail-link\" href=\"https:\/\/cyberscoop.com\/gpt5-openai-microsoft-security-review\/\" tabindex=\"-1\"> <img data-recalc-dims=\"1\" loading=\"lazy\" width=\"505\" height=\"337\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-2.jpg?resize=505%2C337&ssl=1\" class=\"attachment-ratio-16-9-md size-ratio-16-9-md wp-post-image\" alt decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-4.jpg 6754w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-4.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-4.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-4.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-4.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-4.jpg?resize=2048,1365 2048w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-4.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-4.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-4.jpg?resize=505,337 505w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-4.jpg?resize=1012,675 1012w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/07\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness-4.jpg?resize=1264,843 1264w\" sizes=\"auto, (max-width: 505px) 100vw, 505px\"> <\/a><figcaption class=\"screen-reader-text\"> In this photo illustration, a person holds a smartphone showing the Introducing GPT-5 interface in the ChatGPT app, with text describing the model\u2019s capabilities, in front of a blurred OpenAI logo on August 9, 2025 in Chongqing, China. (Photo illustration by Cheng Xin\/Getty Images) <\/figcaption><\/figure>\n<header class=\"post-item__meta\" readability=\"2.2297297297297\">\n<h3 class=\"post-item__title\"> <a class=\"post-item__title-link\" href=\"https:\/\/cyberscoop.com\/gpt5-openai-microsoft-security-review\/\"> Guess what else GPT-5 is bad at? Security <\/a> <\/h3>\n<p> OpenAI and Microsoft have said that GPT-5 is one of their safest and secure models out of the box yet. An AI red-teamer called its performance \u201cterrible.\u201d <\/p>\n<div class=\"post-item__byline\"> <span class=\"post-item__author\"> <span>By <\/span> <a class=\"post-item__author-link\" href=\"https:\/\/cyberscoop.com\/author\/derek-johnson\/\"> Derek B. Johnson <\/a> <\/span> <\/div>\n<p> <\/header>\n<p> <\/article>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/ai-cybersecurity-harness-autonomous-hacking\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Why AI ‘harnesses’ matter more than frontier LLMs for cybersecurity<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[384,4946,385,1807,7069,4805,4274,3408],"tags":[388,4947,389,1810,7070,4807,4277,3409],"class_list":["post-8828","post","type-post","status-publish","format-standard","hentry","category-artificial-intelligence-ai","category-cato-networks","category-chatgpt","category-exclusive","category-kali-linux","category-large-language-models","category-proofpoint","category-tenable","tag-artificial-intelligence-ai","tag-cato-networks","tag-chatgpt","tag-exclusive","tag-kali-linux","tag-large-language-models","tag-proofpoint","tag-tenable"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/artificial-intelligence-ai\/\" rel=\"category tag\">artificial intelligence (AI)<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cato-networks\/\" rel=\"category tag\">Cato Networks<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/chatgpt\/\" rel=\"category tag\">ChatGPT<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/exclusive\/\" rel=\"category tag\">Exclusive<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/kali-linux\/\" rel=\"category tag\">Kali Linux<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/large-language-models\/\" rel=\"category tag\">large language models<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/proofpoint\/\" rel=\"category tag\">Proofpoint<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/tenable\/\" rel=\"category tag\">Tenable<\/a>","tag_info":"Tenable","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/8828","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=8828"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/8828\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=8828"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=8828"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=8828"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":8828,"date":"2026-07-15T10:29:57","date_gmt":"2026-07-15T15:29:57","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=89819"},"modified":"2026-07-15T10:29:57","modified_gmt":"2026-07-15T15:29:57","slug":"forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2026\/07\/15\/forget-the-model-when-it-comes-to-cybersecurity-its-all-about-the-harness\/","title":{"rendered":"Forget the model. When it comes to cybersecurity, it\u2019s all about the harness"},"content":{"rendered":"