# Kimi K3's Cyber Capabilities Evaluated AI model's cybersecurity performance under scrutiny. - **Source:** [Hacker News: Front Page](https://brifing.si/source/b07aa772-b1a0-4a76-aa18-719c6f9e2dde) - **Published:** 2026-07-25 - **Topic:** [Data & AI](https://brifing.si/c/data-ai) - **Original article:** - **On Brifing:** https://brifing.si/s/00fdf0ce-91ea-44e2-a09d-67fd7f174c74 ## Kimi K3's Performance An assessment by UK AISI and CAISI tested the cyber capabilities of Moonshot AI's Kimi K3 model. While outperforming open-weight models like GLM-5.2 in the ExploitBench benchmark, it showed lower performance compared to top proprietary models. Notably, it failed all arbitrary code execution (ACE) tests. ## ExploitBench Results Kimi K3 successfully completed 32% of ExploitBench's 41 tasks, surpassing GLM-5.2's 24% but trailing behind leading proprietary models' average of 49%. The model succeeded in early stages of the software exploitation chain but couldn't complete any tasks at the critical ACE stage. ## Cyber Range Testing In The Last Ones (TLO) cyber range test, Kimi K3 progressed to an average of step 17 in a 32-step attack chain. This outperformed GLM-5.2 but fell short of leading US models' 28.5-step average. The model completed the entire range in 1 out of 10 attempts. ## Comparative Analysis The evaluation showed Kimi K3 could autonomously attack small, weakly defended enterprise systems. However, TLO's lack of defense mechanisms compared to real-world environments raises questions about the model's practical effectiveness in actual cybersecurity scenarios. ## Security Concerns Kimi K3's upcoming open-weight release raises potential risks if obtained by malicious actors. Its ability to automatically target vulnerable systems concerns cybersecurity experts, though real-world defenses would likely detect such attacks. The model's capabilities highlight emerging AI security challenges. ## Industry Implications This assessment underscores the importance of independent testing of AI models' cyber capabilities. Kimi K3's performance demonstrates China's AI progress while revealing gaps with US models. The AI race in cybersecurity is intensifying, demanding new evaluation frameworks and safeguards. ## Sources covering this story - https://www.nist.gov/news-events/news/2026/07/uk-aisi-caisi-preliminary-assessment-kimi-k3s-cyber-capabilities — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._