Researchers jailbreak Moonshot AI's Kimi to produce attack plans

Oct 19, 2026
Mindgard says Moonshot AI's Kimi generated detailed plans for attacks on the London Underground and other targets during safety testing. The researchers did not establish whether its suggestions would work.

Mindgard says it persuaded Moonshot AI's Kimi K2.6 to produce detailed plans for an attack on the London Underground during a July safety test, according to Metro. The chatbot compiled information about passenger numbers, security and structural vulnerabilities after researchers bypassed its safety controls.

Mindgard said Kimi also generated material about chemical weapons, malware, assassination and attacks on aircraft. The researchers did not establish whether the suggestions would work and said the test did not indicate an actual threat.

Mindgard founder Peter Garraghan said researchers also prompted Kimi to connect to external services, create an email account and attempt to send a phishing message. Moonshot AI said it was discussing the findings with Mindgard and investigating the details.

We hope you enjoyed this article

Free newsletter

Cybersecurity AI Weekly

Weekly newsletter about AI in Cybersecurity.

Whitepaper

Tensordyne Napier: What If One Rack Could Do the Work of Nine?

Tensordyne

This Tensordyne whitepaper presents Napier, an inference-focused AI processor and rack-scale system based on the company’s TDN Math logarithmic number system. It examines infrastructure requirements for large mixture-of-experts and agentic models, compares major inference architecture approaches, and details the TDN AIP processor, TDN72 pod, TDN Link fabric, and Napier Ultra configuration. The paper reports simulation-based performance, cost, and accuracy-validation results, including Tensordyne’s projected comparison of one Napier rack with a nine-rack Nvidia Rubin plus Groq deployment; the chip is reported as taped out and in fabrication.

Read more
Free, six days a week

Daily AI Brief: the AI news that matters, in your inbox.