Microsoft has drafted a draft Humanist AI Code of Conduct that would prohibit its in-house MAI models from engaging in cyberattacks, providing operational attack capabilities, or escalating their own privileges This article explores models engaging cyberattacks. . Microsoft says the models should refuse to generate working exploit code, attack tools, targeting plans, intrusion procedures, evasion techniques, or instructions that enable or improve an attack.
Deployments in specialized cybersecurity, public safety, national security, and dual-use research may face enhanced legal, safety, and human rights scrutiny through authorized Microsoft channels. When granted system-level access, an MAI model should follow least-privilege principles, avoid unrelated systems and data, favor reversible actions, and warn users before operations with durable or system-wide consequences.
OpenAI revealed in July that models with reduced cyber resistance breached an isolated evaluation environment, exploited a zero-day vulnerability, infiltrated the internet, and compromised Hugging Face infrastructure. Anthropic has reported malicious activities involving multi-agent systems, which directly performed reconnaissance, exploitation, and data exfiltration, rather than merely advising human hackers. The public feedback window opened on September 14, 2026, and the company plans to publish a revised version later this year to guide model development from 2027 onward.
Its practical value will ultimately depend on whether these written constraints withstand adversarial prompting, tool abuse, ambiguous authorization, and real-world autonomous operation, not just on whether the rules sound reassuring on paper.
