Zephyr plans to open source the system within four days.
Agents had web access and pulled in details from a merged Redis PR describing one of the bugs, so the result shows fast exploit generation from known clues rather than blind discovery of an unknown flaw.
A public GitHub repo ships Python code, calibration scripts, and notes targeting specific Redis releases including an unfixed issue in the RedisBloom module, though success on the newest build is layout-sensitive and works best on a fresh instance.
Positive users are amazed by Kimi K3 discovering a Redis zero-day with 32 agents and its open-sourcing plans, while negative users worry about the high cost of needed hardware like a dozen B300s.
No Digg Deeper questions have been answered for this story yet.
K3 will be open-sourced in 4 days
Kimi K3 exploited the latest Redis server with a 0day it discovered. All it took was 27min with 32 agents. https://github.com/berabuddies/redis-poc
Oh well then. Is this big or was this easy?
Kimi K3 exploited the latest Redis server with a 0day it discovered. All it took was 27min with 32 agents. https://github.com/berabuddies/redis-poc
@zephyr_z9 Long Moonshot short NDQ - genny pair trade
@zephyr_z9 Any hope for beggers, who don't have money for a dozen B300s
@zephyr_z9 still doubtful they do it if they do, then we are entering a new era of technology and the world lol
Open source release due in days. Meanwhile US commercial models are still running cyber classifiers. Tick tock.
Kimi K3 exploited the latest Redis server with a 0day it discovered. All it took was 27min with 32 agents. https://github.com/berabuddies/redis-poc
@zephyr_z9 Too much words! Bearish or bullish
@BlackHC Hard to tell without context, but usually the easy wins are the ones you overthink first.
@zephyr_z9 https://x.com/i/grok/share/0ab61ab6fe244e3ea755ec22af7bf240