Frontier Model Forum releases a framework to rate AI cyber jailbreaks

Version 1.0 scores jailbreaks on severity and likelihood, giving labs and policymakers a shared way to rank cyber risk from frontier models The biggest AI labs now have a shared scorecard for one of their least comfortable problems: people tricking their models into helping with cyberattacks. The Frontier Model Forum (FMF) has published Version 1.0 of its Jailbreak Rating Framework for Frontier Cyber Threats. It offers a structured way to rate how dangerous a successful cyber jailbreak actually is. The release landed on November 5, 2026. The FMF calls it a preliminary framework, which is a polite way of saying the rulebook is still open for edits. How the scoring works A jailbreak is any technique that gets an AI model to ignore its safety guardrails and do something it was built to refuse. The framework sorts jailbreaks across four categories: Capability gain: how much extra offensive ability the jailbreak unlocks. Capability scope: how broad that unlocked ability is. Ease of deployment: how simple the technique is to actually use. Ease of discovery: how easily someone could find the technique in the first place. Those four inputs feed a scoring system that maps onto two axes, Sev...