Open-weight AI models can exploit the patch gap

AI summary

Open-weight AI model GLM 5.3 exploited published Firefox security fixes to create one-click exploits for six releases at roughly $1,000 each.

Key points

•The open-weight AI model GLM 5.3 created one-click exploits by exploiting published Firefox security fixes.
•The model generated working exploits for six release versions.
•The cost of creating each exploit was approximately $1,000.

Read the original

#Security & Misuse #LLM / Model Trends #GLM-5.3 #Firefox

#Security & Misuse#LLM / Model Trends#GLM-5.3 #Firefox

The Verge10/28/2026

Firefox’s Smart Window adds AI form filling and webpage monitoring

Mozilla updated Firefox's Smart Window with an AI feature that automatically fills out online forms by extracting information from open tabs, such as portfolios or LinkedIn profiles.

Hacker News10/27/2026

Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)

A configuration mismatch in GLM 5.3 on Workers AI triggered an SGLang bug that exposed KV cache pages across requests, an issue that has since been addressed.

PC Watch9/30/2026

Anthropic Warns of GLM-5.3, Which Possesses Cyberattack Capabilities Comparable to Mythos

Anthropic warned that Zhipu AI's GLM-5.3 model can autonomously build cyber exploits and is publicly available without effective safety measures.

Hacker News9/30/2026

GLM-5.3 and the spread of advanced cyber capabilities

GLM-5.3 can autonomously build end-to-end cyber exploits but was released without meaningful safeguards to limit misuse.

Hacker News9/27/2026

Turning GLM-5.3-Flash into a Jev-like decision model

The article introduces methods to extract Jev-like characteristics from standard LLMs like GLM-5.3-Flash and reports benchmark results in a vLLM environment.