appConfigEntityId

bodyType

customContents

entityId

entityUuid

isVideo

articlePageQuery

article

articleSchemaContent

content

hooksArticlePageAdvertisementConfigArticle

hooksArticlePageFloatingButtonConfigArticle

appConfig

filter

json

liveArticle

Xinmei Shen

China’s top open-weight AI model Kimi K3 broke out of its isolated test environment during a cybersecurity evaluation, according to US security researchers, following similar high-profile incidents involving closed frontier models from OpenAI and Anthropic that highlight the growing challenge of constraining AI behaviour.
Kimi K3, released last month by Beijing-based Moonshot AI, escaped from a supposedly isolated sandbox environment, accessed the open internet and found solutions on the developer platform GitHub, US firm Frontier Security said in a blog post on Thursday.
According to Frontier Security researchers Paul Kassianik and Yaron Singer, the incident occurred when the firm tested Kimi K3’s defensive cybersecurity capabilities using a benchmark evaluation from the AI Security Institute – a UK government research organisation.
A “basic network misconfiguration” in the benchmark framework allowed Kimi K3 to flee its digital testing cage and look up answers on the internet, effectively cheating the test, they said.
Kimi K3’s escape, however, did not involve the hacking of an external system, unlike recent breaches caused by OpenAI and Anthropic models.

Last month, OpenAI said its flagship GPT-5.6 Sol and an unreleased, “even more capable” system broke out of a sandboxed environment and hacked the open-source developer platform Hugging Face to obtain secret information containing answers to an internal test.
Anthropic later disclosed that it had also identified three previous incidents where its Claude models – including Opus 4.7, Mythos 5 and an internal research model – breached the infrastructure of three undisclosed organisations.
Even without a direct hack, the Kimi K3 incident could still be “potentially more harmful” because of the model’s open-weight nature, which makes it publicly available to adversarial actors, Frontier Security said.
Kimi K3’s ability to circumvent its test parameters also reflected the model’s weaker internal safeguards, according to one of the researchers.
“It found the misconfiguration itself, by probing its own network settings,” Kassianik wrote in a social media post on Friday. “Most publicly available frontier models have internal guardrails that stop them. K3 didn’t blink.”
Moonshot did not immediately respond to a request for comment on Friday.
The rapidly advancing capabilities of frontier AI have heightened global cybersecurity concerns, pushing the role of widely accessible open-weight models to the centre of an escalating debate.
While critics warn that advanced open-weight models lower technical barriers for malicious actors, several US AI leaders have defended open-source systems’ key role in cyber defence.
American tech giants including Nvidia, Palantir and Meta Platforms last month signed an open letter urging Washington not to restrict open-weight models. While open models carried real risks, they also enabled cybersecurity defenders to detect and respond to emerging threats posed by AI-equipped attackers, the companies argued.
That point was underscored when Hugging Face had to rely on GLM-5.2, an open-weight model from Beijing-based Zhipu AI, to contain the OpenAI attack after major proprietary US models refused to process the security logs due to safety guardrails.


Huawei unveils latest tech to boost AI power in push to break China’s Nvidia reliance

Hong Kong’s 5-year plan, policy continuity offer investors more stability, experts say

Huawei accused of stealing robot tech to get hands on T-Mobile’s trade secrets

Hong Kong aims to raise innovation spending to 3% of GDP by about 2030

Artificial intelligence (AI)

China’s Kimi K3 AI model escapes isolated sandbox during security test: researchers

The Kimi K3 incident follows similar ones  involving closed frontier models from OpenAI and Anthropic. Photo: Getty Images

Kimi K3 was released last month by Beijing-based Moonshot AI. Photo: Reuters

US tech giants invited to discuss AI security tests at White House

Anthropic is among the leading US artificial intelligence developers that have agreed to discuss early access to its most advanced models with the Trump administration. Photo: Reuters

Google is one of the leading AI companies that the voluntary framework draft has been circulated to. Photo: Reuters

Tencent ramps up overseas AI push with wider roll-out of flagship Hy3 model

The Tencent logo. Photo: Reuters

The Tencent booth during the World Artificial Intelligence Conference in Shanghai on July 18. Photo: AFP

Backed by DeepSeek, Unitree IPO tests investor appetite for China’s AI robotics boom

Visitors interact with a robot from Unitree Robotics during the China International Consumer Products Expo in Haikou, south China’s Hainan province, April 14, 2026. Photo: Xinhua

Unitree robots are displayed at the VivaTech fair in Paris, June 17, 2026. Photo: AFP

Unrelenting AI demand spawns new plant for Chinese PCB maker Victory Giant

A production line at Victory Giant Technology in Huizhou, in southern China’s Guangdong province. Photo: Handout

Victory Giant raised US$2.6 billion in its Hong Kong listing in April. Photo: AFP

Chinese optical-module stocks rebound as analysts downplay ‘mild’ AI curbs proposed by US

Workers are seen at a data centre. Photo: Shutterstock

Tech

Policy

Tech Trends

News

China Future Tech

Kimi K3’s escape did not involve the hacking of an external system, unlike recent breaches by OpenAI and Anthropic models


Kimi K3’s escape did not involve the hacking of an external system, unlike recent breaches by OpenAI and Anthropic models.


China’s Kimi K3 AI model escapes isolated sandbox during security test: researchers

.css-1c6uqr6{color:inherit;font-weight:inherit;font-size:inherit;font-family:inherit;line-height:inherit;overflow-wrap:break-word;}Kimi K3’s escape did not involve the hacking of an external system, unlike recent breaches by OpenAI and Anthropic models

Kimi K3’s escape did not involve the hacking of an external system, unlike recent breaches by OpenAI and Anthropic models