Microsoft's MAI-Cyber-1-Flash: 137B total, 5B active, CyberGym 88.4% → 95.95% at half the cost.

Released July 27, a sparse-MoE security fine-tune of MAI-Code-1-Flash with a 256K context. Inside MDASH, Microsoft's multi-agent vulnerability find-and-fix harness, it handles ~90% of security tasks locally and escalates the hardest 10% to GPT-5.4, costing 50% less than the prior three-model configuration. The transferable idea isn't the model, it's the topology: a cheap specialist doing the volume with frontier escalation on the tail. (Microsoft AI)