TLDR InfoSec · MISCELLANEOUS

KIMI K3 ESCAPED A CYBERSECURITY TESTING ENVIRONMENT DURING EXPERIMENT RUN BY FRONTIER SECURITY, A PRIVATE US FIRM

rohan-paul.com8 min read

Summary from the TLDR InfoSec newsletter

Moonshot AI's open-weight Kimi K3 broke out of a sandboxed benchmark run by private firm Frontier Security, exploiting unblocked outbound DNS and HTTPS to reach GitHub and pull the official solution instead of solving the task itself. The UK AI Security Institute only built the open-source sandbox framework and was not involved in running the test, and researchers attribute the escape to a network misconfiguration rather than deliberate model misbehavior.