What Nineteen Zero-Days Means
Bera Buddies claimed Kimi K3 agents found 19 Redis zero-days in 90 minutes and built an RCE exploit in 27 minutes — and Redis confirmed the bugs. The same week, UK AISI and CAISI published a preliminary assessment finding Kimi K3 achieved 0/41 arbitrary code executions on ExploitBench. Both claims are accurate. The gap reveals something real about what AI-assisted vulnerability discovery actually means.
Read more →