X-Risk Daily

Published on 23 July, the evaluation covered a model that AISI says was "released on July 16, 2026 and slated for open-weight release by July 27, 2026". The two institutes found that K3 "performs significantly below the most recent frontier cyber-capable models on preliminary cyber evaluations", struggling in particular to convert identified vulnerabilities into working exploits.

On ExploitBench, a Carnegie Mellon-built benchmark testing whether models can push a known vulnerability through to a full exploit, K3 scored 32.2%, ahead of the Chinese model GLM-5.2 at 24.4% but far behind an average of 76.2% for the leading US models, according to Interesting Engineering. On the more severe measure of arbitrary code execution, the gap was starker still: K3 achieved ACE on none of the 41 test cases, while "the most cyber-capable models achieved ACE on 20/41 samples on average". In a simulated 32-step corporate network intrusion exercise called "The Last Ones," K3 reached step 17 on average, versus 28.5 steps for the strongest US systems, though the report noted the model did complete the full attack chain in one of ten attempts. AISI cautioned that "these results represent preliminary evaluations on a small set of public and private benchmarks", and that the US closed-weight comparators were tested with safeguards disabled to reduce refusals.

Notably, the evaluators found that Kimi K3's safeguards did not prevent it from attempting cyber exploit development or offensive cyber operations during testing, even though its raw capability lagged. Commentator Zvi Mowshowitz's roundup notes debate over whether Moonshot deliberately constrained the model's cyber capabilities, and one circulating hypothesis, floated by The Decoder according to AI Weekly's summary, is that K3's reliance on distilled outputs from safety-aligned Western models may have stripped out offensive-cyber examples at the source; this is flagged as a hypothesis rather than a confirmed finding. The South China Morning Post frames the findings as cutting against Washington's anxiety over China's rapid open-source AI progress, given K3 is regarded as the country's most capable large language model to date.

The report also states K3 trails the strongest proprietary systems, ranking third globally on Artificial Analysis behind models referred to as Claude Fable 5 and GPT-5.6 Sol, while sitting at the cost-efficiency frontier at roughly $0.94 per Intelligence Index task against GPT-5.6 Sol's $1.04, according to kie.ai. Alongside the model, Moonshot open-sourced AgentENV, a sandbox infrastructure built with Tsinghua University-linked collaborators for agentic reinforcement learning training; MarkTechPost describes it as a Firecracker microVM platform whose snapshot-backed environments "boot or resume in under 50 ms and pause in under 100 ms", alongside a forking feature allowing a running sandbox to clone into up to 16 parallel child environments for scaled rollouts.

Go deeper: UK AISI's full preliminary assessment of Kimi K3's cyber capabilities, MarkTechPost's technical breakdown of the open-sourced AgentENV sandbox system

The war between the United States and Iran widened further after Washington resumed strikes on Tehran, describing them as pre-emptive action against a planned Iranian attack on US troops in Jordan, while Iran launched fresh attacks on Kuwait. On 29 July, a drone struck the Energos Winter, a floating storage and regasification unit at Egypt's Damietta port, with the fire spreading to a second vessel, the GasLog Salem LNG tanker. Egypt's cabinet initially disputed that a drone was responsible before confirming "preliminary investigations by the relevant authorities determined that it was caused by a drone", in what the Wall Street Journal described as Egypt's first drone attack of the war. No party claimed responsibility, though Iranian state television had named Damietta as a target two days earlier, following a Ukrainian strike on an Iranian vessel in the Caspian Sea over the weekend, describing the port as "a gateway for gas exports to Europe." President Trump called the incident "Iran-related," though the Washington Times reported that some Middle East analysts were unsure that Tehran was behind the attack. Ukraine's strike on the Iranian-linked vessel came after Kyiv said it had targeted a Russian warship and ships carrying Iranian military cargo; Iran said the civilian cargo ship Anna was also hit and a sailor killed. Iran's Foreign Minister Abbas Araghchi separately pressed Cyprus and Bulgaria over their hosting of Western military facilities. In a call with his Bulgarian counterpart, Araghchi condemned Sofia's decision to allow the temporary deployment of American aircraft, after Bulgaria's parliament approved the temporary deployment of up to eight US KC-135 aerial refuelling aircraft and up to 250 military personnel at Bezmer Air Base despite Tehran's objections. Bulgaria has maintained that no offensive weapons systems will be stationed there and that the arrangement does not make it a party to the conflict. In a parallel call with Cyprus's foreign minister, Araghchi pressed for guarantees that the island's two British sovereign bases, including RAF Akrotiri, would not be used against Iran; Cypriot officials said they had received assurances from London that the bases would not be used against any country, including Iran. Akrotiri had already been struck by a suspected Iranian drone in March, days after the US and Israel launched their initial strikes on Tehran. Forecasters put only a 9% (5-15%) probability on Iran or its proxies striking Bulgaria or Romania before October 2026, judging this a desperate, highly escalatory option. Iran-backed militias also struck US forces and Saudi oil facilities in Iraq, prompting Saudi-US retaliatory strikes that reportedly killed at least 20 fighters, and 14 countries announced a new Multinational Maritime Defense Alliance to protect shipping through the Bab al-Mandeb Strait and Red Sea. Iran is reportedly set to receive 300-400 Chinese-made MANPADS in the coming weeks, one of its largest known efforts to replenish air defences during the war, as its closure of the Strait of Hormuz has already removed roughly a fifth of global LNG supply from the market.

According to the think tank's analysis, cited by Stars and Stripes, the U.S. has between 759 and 827 Patriot interceptors left, roughly a third of its prewar inventory, while it has an estimated 234 to 278 THAAD interceptors remaining, down from 452 before the war. CSIS analysts Mark Cancian and Chris Park, who authored the report titled "Renewed Iran War Would Test Diminished Interceptor Inventories," found the depletion has continued even after fighting flared and paused repeatedly since the conflict began on 28 February.

The scale of the drawdown has alarmed officials well beyond the immediate theatre. CNN reported that three sources familiar with Pentagon data said the CSIS estimates were close to the government's own internal figures, and that Cancian had told the network earlier in the month that continued fighting with Iran could deplete stockpiles low enough to affect the US military's ability to fight China or North Korea. Kelly Grieco, a missile expert at the Stimson Center, told Fox News that "over half the global inventory has now been consumed in the Middle East," adding that this "really leaves us with very little excess to be able to use in other theaters, whether it's defending US forces in Europe or the Indo-Pacific."

The strain has already shaped battlefield decisions. CNN reported that NBC News found US commanders, wary of wasting scarce interceptors, have chosen not to shoot down Iranian projectiles headed for unpopulated parts of American bases in the region. CSIS itself concluded that the deeper danger lies not in sustaining the current fight but in responding to a separate high-intensity crisis before stockpiles can be rebuilt, according to Military Times. Replenishment will not happen quickly: Lockheed Martin delivers roughly 183 of the top-tier Patriot variant a year and takes about three and a half years to fill a new contract, per figures CSIS gave to ABC News, and CSIS analysts told reporters it takes several years to produce a missile, so "if you put money into the system today, you wouldn't get a missile for three or four years."

Washington has moved to address the shortfall. The Army converted a one-year Lockheed Martin contract into a seven-year, $58.6 billion deal to produce Patriot interceptors through 2032, and Lockheed also holds a roughly $35 billion contract awarded in June to expand THAAD production, according to The Hill. Both contracts remain "undefinitized," meaning full funding still requires congressional approval. CSIS's report noted there is no substitute readily at hand: "Diminished stockpiles may force the United States and its coalition partners to take more risks with interceptions," the CSIS analysis says. "There are no good alternatives to Patriot and THAAD for ballistic missile defense. Navy ships, with Standard Missiles that can intercept such threats, generally are too far away."

Go deeper: Military Times: Iran war depleted US Patriot missile stockpiles, creating readiness challenges, experts say, CNN: US weapons stockpiles continue to dwindle with permanent end to Iran war nowhere in sight