logo

Moonshot AI governance breakdown: Lessons from the Cursor/Kimi K2.5 incident

ID: f8a4c4a1-53e2-5288-9da0-906171b6dc71

STIX ID: report--f8a4c4a1-53e2-5288-9da0-906171b6dc71

Feed Name: Security Boulevard

Date Published: 2026-03-20

Date Updated: 2026-04-22

Author: Tiffany Jennings

...
...

The post describes a public licensing/compliance problem in which Cursor’s new Composer 2 appears to be a fine-tuned version of Moonshot AI’s Kimi K2.5 model without honoring the model’s Modified MIT license attribution/usage terms, and uses the incident to illustrate gaps in AI governance (missing AI inventories, shadow AI, and performance vs. transparency trade-offs) while pitching Mend.io’s platform for automated AI-BOM, risk tracking, and policy enforcement.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.