The UK Artificial Intelligence Security Institute (UK AISI) and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) conducted a preliminary assessment of Kimi K3's cyber capabilities. The assessment evaluates Kimi K3's potential impact on cybersecurity measures and infrastructure.

Microsoft Copilot Cowork is susceptible to file exfiltration attacks through indirect prompt injection due to insecure automatic action approvals for sending emails and Teams messages. This vulnerability has shown a high success rate against advanced models, including Claude Opus 4.7.

Wiz Research identified a critical vulnerability (CVE-2026-3854) in GitHub's internal git infrastructure that allows authenticated users to execute arbitrary commands on backend servers with a single git push command. This vulnerability is notable as one of the first critical flaws found in closed-source binaries using AI.