# UK and US Jointly Assess Kimi K3's Cyber Capabilities

Preliminary evaluation reveals AI model's cybersecurity performance in benchmark tests.

- **Source:** [Hacker News (news.ycombinator.com)](https://brifing.si/source/13c923cd-6d99-442b-9b8b-1181f4d8cd91)
- **Published:** 2026-07-25
- **Topic:** [Data & AI](https://brifing.si/c/data-ai)
- **Original article:** <https://www.nist.gov/news-events/news/2026/07/uk-aisi-caisi-preliminary-assessment-kimi-k3s-cyber-capabilities>
- **On Brifing:** https://brifing.si/s/90658ba7-e4c1-4e88-acf9-744beff76d5a

## Pioneering Evaluation Report

UK AISI and US CAISI conducted tests on Moonshot AI's Kimi K3 model's cyber capabilities. Released on July 16, 2026, the model will be available as open-weight on July 27. The assessment focused on measuring the model's exploit development capacity through specialized benchmarks.

## ExploitBench Performance

Kimi K3 achieved 32% success rate in Carnegie Mellon's ExploitBench, outperforming June 2026's most capable open-weight model GLM-5.2 (24%). However, the model failed in the most critical cybersecurity scenario - arbitrary code execution, which represents the highest severity exploit outcome.

## Cyber Range Test Results

In the 32-step 'The Last Ones' cyber range simulation, Kimi K3 reached step 17 on average. While top US models completed 28.5 steps, Kimi succeeded in fully completing the range in 1 out of 10 attempts, demonstrating potential to attack weakly defended systems when provided initial access.

## Comparative Analysis

The report compares Kimi K3's performance with global models. US closed-weight models showed superior capabilities when safety restrictions were removed. However, Kimi K3 emerged as a leading performer among Chinese open-weight models in cybersecurity benchmarks.

## Methodology and Limitations

Assessments used Item Response Theory-inspired approach. Kimi K3's evaluation scope was narrower than other models. Researchers noted cyber range tests don't fully replicate real-world conditions as they lack active defense mechanisms and intentional alert systems.

## Industry Significance

This evaluation establishes critical reference points for measuring AI models' cybersecurity capabilities. It provides valuable insights for developers and security professionals in understanding the offensive potential of open-weight AI models in controlled environments.

## Sources covering this story

- https://www.nist.gov/news-events/news/2026/07/uk-aisi-caisi-preliminary-assessment-kimi-k3s-cyber-capabilities — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
