Heidelberg AI News
All stories
4 stories about Kimi K3.1 Pro
Saturday 31 October
Friday 30 October
ArticleThe Decoder
Open-weight model GLM 5.3 built full Firefox exploit chains with zero human input in under 48 hours
Researchers at Epoch AI report that the open-weight Chinese model GLM 5.3 autonomously built full Firefox exploit chains with no human input, exploiting the 'patch gap' between when security fixes appear in code and when they reach users. The model identified disguised security fixes, chained vulnerabilities with a previously unpublished flaw to bypass browser sandbox protections, and could read local files when a user visited a webpage. Attacks cost about $1,000 in API fees per Firefox version across six versions released Sept 17–Oct 26, taking 12 hours for the fastest and up to 48 hours. No API providers tested triggered safety guardrails. Mozilla patched the flaw in Firefox 159.0 (Oct 27). The same setup spent roughly $100,000 on Google Chrome without producing an equivalent exploit. Researchers warn the patch-gap risk spans the software industry and note untested benchmark data suggesting Kimi K3.1 Pro could outperform GLM 5.3 on offensive cyber tasks.
Thursday 29 October
Saturday 24 October
VideoMatt Wolfe
Open-Source AI Models Caught Up! (Kimi K3.1 Pro)
Matt Wolfe reports that Chinese lab Moonshot AI has released Kimi K3.1 Pro, an open AI model that reportedly built video game demos—a racing game, a zombie shooter, a parkour game, and a medieval town—on its own in real game engines like Unity, Unreal, and Blender. Artificial Analysis ranks the model fourth among all models it tests, and on a coding benchmark it finishes less than a point behind Anthropic's Claude Opus 5.5, at roughly half the price of Opus and about 15th the price of a GPT-6 Astra model. The full model releases November 4 and can be downloaded and run on a company's own servers.