Moonshot released Kimi K3, a 2.8-trillion-parameter open-weight multimodal model with a 1-million-token context window, available on Hugging Face. The model uses a Mixture-of-Experts architecture that activates 16 out of 896 experts, achieving approximately 2.5 times better scaling efficiency than its predecessor Kimi K2. The open release enables researchers and developers to build and deploy frontier AI systems for coding, knowledge work, and reasoning tasks.
Microsoft released MAI-Cyber-1-Flash, a 5B-active-parameter AI model designed for cybersecurity vulnerability detection that runs within MDASH, Microsoft's multi-model scanning system. The model achieved 95.95% on CyberGym, a benchmark of 1,507 real-world vulnerability tasks, up from 88.45% when MDASH used only general-purpose models. MDASH now routes 90% of tasks to MAI-Cyber-1-Flash while escalating the hardest 10% to GPT-5.4, reducing costs by 50% while improving vulnerability discovery performance.
Moonshot AI released Kimi K3, a 2.8-trillion-parameter open-weights model with 104B active parameters, which independent benchmarks show outperforms Claude Opus 4.8 and ranks first among open models on agent benchmarks. The release included supporting infrastructure (FlashKDA kernels, MoE libraries, distributed agent environments) and uses source-available rather than permissive open-source licensing, with commercial restrictions on hosting providers over $20M/year revenue and products over 100M users. Meanwhile, NVIDIA launched an Open Secure AI Alliance arguing that defenders need access to both open and closed models for security, while Anthropic clarified it does not oppose open-weights models but supports chip controls and safety testing instead.
Every AI story that matters,
in your inbox by 8am.
TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the
day in two minutes. Follow companies and topics for alerts, or get the
briefing in Slack. Free, no spam, unsubscribe anytime.
Reading TLDRocket needs no cookies, and the readership counts we rely on come from
our own cookieless analytics. Google Analytics is the exception: it sets cookies and
reports to Google, so it stays switched off until you allow it. You can change your
mind any time from “Cookie settings” in the footer.
Strictly necessary
Session security and form protection (tldrocket-session,
XSRF-TOKEN, 2 hours). The site cannot work without them,
so they need no consent.
Always on
Google Analytics 4 (_ga,
_ga_<id>, up to 2 years). Measures which
stories and sections readers use. Google acts as a third-party processor and may
store the data outside the EU. No advertising, no profiling, no data sold.
