[kimi]

August 20, 2026

• Kimi Desktop ships an updater that can install unverified code, an unsigned-update path in an AI desktop client that is effectively a pre-built supply-chain foothold (runtimewire). · Exploitation & Vulnerability Research

in Feds Say AI-Written Exploit Code Is Already Hitting Siemens PLCs

July 24, 2026

• Kimi K3 reportedly discovered and exploited a Redis 8.6.x 0-day with 32 subagents in 27 minutes. Researcher @chetaslua claims a jailbroken Kimi K3 was pointed at "latest 8.6.x redis," told to hunt for BOF/UAF bugs, and produced a working exploit — though the UK AI Safety Institute and NIST's CAISI rate Kimi K3 below leading US frontier models on cyber evals, and Semgrep found its code-security output imprecise. Treat the tweet claim with the appropriate skepticism. · AI & Model Security

in The Week AI Agents Started Doing the Hacking