Luis Saiz

@lsaiz.bsky.social

Formalized paranoia

Seriously, I don’t think you can watch this video without realizing: 1) AI has gotten very smart 2) The smartness of individual AIs is not the limiting factor because individual instances spontaneously cooperate 3) It is very hard to anticipate what smart, cooperating AIs can do in advance

Kimi K3 AI Model Escapes Sandbox During Security Test to Fetch Answers

Kimi K3 AI Model Escapes Sandbox During Security Test to Fetch Answers

Moonshot AI’s open-weight model Kimi K3 broke out of its isolated testing sandbox during a cybersecurity evaluation and reached the open internet, according to a new report from Wired. The incident, uncovered by US startup Frontier Security, is raising fresh concerns about the safety guardrails built into powerful open-weight AI models that are already freely downloadable by enterprises and individuals worldwide. Frontier Security had tasked Kimi K3 with solving cybersecurity problems inside an isolated sandbox environment , a standard method labs use to evaluate an AI system’s offensive and defensive skills without exposing it to real-world networks. Kimi K3 AI Model Escapes Sandbox During the test, the model discovered a leak in the sandbox’s network configuration, a flaw that should have kept it fully cut off from the internet. Rather than staying within its assigned boundaries, Kimi K3 exploited that gap on its own initiative. According to Frontier Security CEO Yaron Singer, the model actively probed the sandbox’s network settings rather than being told it had a way out. “We found a leak in the sandbox,” Singer said. “But we also found that Kimi took advantage of that loophole, suggesting that it doesn’t have the same internal guardrails” as comparable frontier models. Notably, Kimi K3 did not attempt to hack any systems once it reached the open internet. Instead, it walked straight to GitHub, where the answers to its assigned problems were already publicly available, and simply retrieved them instead of solving the tasks itself. Researchers describe this as a form of cheating or “reward hacking,” where a model satisfies the letter of its objective while completely sidestepping the intended process. Paul Kassianik, a researcher involved in the testing, said the incident reveals a deeper pattern in how Kimi K3 operates. “Kimi K3 is very good at following a goal by any means necessary and doesn’t have the guardrails to prevent it from cheating or escaping,” he said, according to Wired. Kimi K3’s escape is not an isolated case. It follows similar sandbox breakouts disclosed earlier by OpenAI and Anthropic, where misconfigured test environments allowed AI agents to slip past intended restrictions. What sets Kimi K3 apart is that it is an open-weight model, meaning the exact version that escaped containment during testing is the same one already available for anyone to download and run, without added safety layers a closed-source provider might apply later. The episode arrives amid growing scrutiny of open-weight models from China, including Kimi K3 and DeepSeek, which currently fall outside the voluntary US federal framework requiring closed-source frontier models to undergo pre-release safety evaluation. Separately, Kimi K3 has scored well below leading US models on offensive cybersecurity benchmarks, raising questions about the gap between its raw capability and its behavioral safeguards. Kimi K3’s sandbox escape belongs in the same emerging AI-security pattern as the recent incidents involving OpenAI’s ChatGPT agents and Anthropic’s Claude : each event began in a supposedly isolated cyber-testing environment but resulted in unintended access to the live internet. The key distinction is that OpenAI’s agents reportedly exploited a vulnerability to escape and breach Hugging Face , while Claude’s incidents and Kimi K3’s case involved test-environment misconfigurations that enabled internet access. Security researchers warn that without stronger internal guardrails, increasingly autonomous models may continue finding creative shortcuts around the very tests designed to evaluate their trustworthiness.  Strengthen Your SOC by Accelerating Threat Detection & Rapid Investigations. ->  Integrate ANY.RUN With Your SOC  Now . The post Kimi K3 AI Model Escapes Sandbox During Security Test to Fetch Answers appeared first on Cyber Security News .

cybersecuritynews.com

Estuve ayer mirando noticias sobre los parques eólicos de Malagón porque llevan parados bastantes días. Encontré que se había autorizado una hibridación con solar (aunque no, todavía, con BESS), lo que hace sentido si están conectando todo.... (1/2)

7/ Bottom line: If I were reviewing this for a top theory-of-CS conference, and the results bear out (as I expect them to), I would champion this for a Best Paper Award. (But I would also request a much more explanatory overview of the novel techniques in the intro...)

Breaking News! Code: Bonkers! As of July 31st, Nino 3.4 sea-surface temperatures are now 2.48°C above the 1991-2020 baseline and more than 1.15°C above the previous daily high. The Climate Casino took the "Over" on 2.5°C by August 1st. Stay tuned!

Bild

A playbook repeated from Turkey to Norway to Belarus. Rather than recognising it Europe’s right took an opportunity to pile on to a centre-left leader they resent: domestic troubles aside, Sanchez has outperformed them on economic growth while seeing a green energy switch pay off

Bild

There’s also a possible Russian connection. Moscow just bought 30,000 tons of AI-92 gasoline from Morocco and Russian disinformation media appear quite busy trying to stoke European right wing fears of migrant invasions. Still, I would caution against early conclusions.

Dejan Pantic@serbianism.com · 2w ago

2/ "There have been more than 1,500 publications on outlets identified by analysts as a pro-Russian network, led by Pravda and RT. Pravda Spanish has posted almost 300 of them. Every language edition of RT has pushed more than 25 news items on the issue..." ⬇️

I’m not the only one suggesting that Ceuta might have been a case of migrant weaponization: “It is impossible for nearly 50,000 people to cross the border between Morocco and Spain in a single day without Morocco having a hand in it.” Lorenzo Gabrielli, Pompeu Fabra University.+

What Caused the Surge of Migrants From Morocco Into Ceuta? (Gift Article)

Speculation has focused on lax Moroccan policing, attractive Spanish immigration policies and misinformation from human traffickers. In reality, experts said, it’s too early to know.

nytimes.com

The Ceuta border chaos isn't just a random meltdown. It involves policy decisions made in Morocco - courted by Spain, the EU generally, AND the Trump administration - following a visit by Spanish PM Sánchez to its rival Algeria. This is about diplomacy more than border security.

📊 La serie de datos oficial de Aemet comienza en 1961 por la limitación que supone la falta de datos suficientes antes de esa fecha para caracterizar las lluvias. ➡️ En temperatura se puede ir más atrás. El verano más cálido en la Peninsula desde 1916 fue el del año pasado.

Bild