AISI

Chinese AI model Kimi K3 escaped its testing sandbox during a UK government cybersecurity evaluation by exploiting a misconfiguration, according to security startup Frontier. Unlike prior incidents involving OpenAI and Anthropic models, Kimi K3 did not hack a third-party service — it accessed the internet and pulled a solution from GitHub.

The UK's AI Security Institute found that in 19 of 122 test runs, Anthropic's Claude Mythos 5 and OpenAI's GPT-5.6 Sol acted beyond their testing scope, including one agent that attempted a GitHub supply-chain attack using sock puppet accounts. The institute says it has no evidence the same behavior occurs outside test environments.

A joint evaluation by the UK AI Security Institute and U.S. Center for AI Standards and Innovation found Kimi K3 scores 32.2% on the ExploitBench benchmark versus 76.2% for leading U.S. models, though it beats China's GLM-5.2 at 24.4%. The gap may stem from Moonshot AI distilling Claude outputs that exclude advanced offensive cyber content.