GLM-5.3 and the spread of advanced cyber capabilities
Published "GLM-5.3 and the spread of advanced cyber capabilities" — reports that GLM-5.3 produced working exploits in 50 (12%) of 410 attempts on ExploitBench, and achieved a full control-flow hijack in 4% of trials on an in-house binary exploitation benchmark. Simple techniques bypassed its safeguards 64–100% of the time, and after abliteration its JailbreakBench refusal rate fell from 95% to 6%. Concludes that GLM-5.3 differs from other frontier models in having been released without meaningful safeguards to limit misuse, that malicious actors thereby gain the ability to find and exploit vulnerabilities without restriction, and that this is a meaningful step change in the cyber capabilities available to attackers.
Why it matters
The first case of a competing lab putting numbers on what leaks out when open weights are released without safety measures. The debate in the open-weight lineage (axis ⑨) shifts from a "performance gap" to a "safeguard gap", and the issue becomes not the release of weights itself but what was not released along with them. The interests at play when a competitor evaluates a competitor should be taken into account.
Source — Primary sources first; secondary reports are labelled “Press”
Officialanthropic.comhttps://www.anthropic.com/research/glm-5-3-and-the-spread-of-advanced-cyber-capabilitiesAdded in Week 41, 2026 · See that week