One Year Left to Secure Systems as Open-Source GLM-5.3-Flash Enables Automated Cyber Attacks

Chinese company Z.ai Co. released GLM-5.3-Flash in August 2026, an open-weight model that achieves 84.5% on CyberGym and 54.4% on ExploitBench, matching or exceeding leading commercial LLMs in vulnerability discovery and exploitation tasks. The model runs locally on consumer hardware such as a single Nvidia DGX Spark or Apple M5 Mac Studio with 256 GB unified memory, allowing unrestricted use after abliterated versions remove safety alignments. Experts warn that LLM agents could soon scan and exploit zero-days across Windows, Linux, browsers, and messaging apps around the clock. Initiatives Project Glasswing (Anthropic-led) and Daybreak (OpenAI-led) are racing to patch critical vulnerabilities in open-source projects and critical infrastructure before the next generation of unrestricted models arrives. Organizations are advised to accelerate patch deployment, inventory supply chains, and adopt advanced LLMs defensively within the remaining one-year window.

HabrOctober 16, 2026Translated from Russian

Read at source

In August 2026, Chinese firm Z.ai Co. (formerly Zhipu AI) open-sourced GLM-5.3-Flash, a model optimized for low-cost inference that immediately matched top commercial LLMs on security benchmarks.

GLM-5.3-Flash scored 84.5% on CyberGym, which tests real, previously disclosed vulnerabilities in production codebases, and 54.4% on ExploitBench, a metric that awards partial credit for functional exploit components. At the time of release it led CyberGym ahead of GPT-5.6 Sol (83.6%), while GPT-6 Astra remained the leader on ExploitBench with 100%.

Because the model runs efficiently on a single Nvidia DGX Spark GPU or Apple’s Mac Studio M5 with 256 GB unified memory, unrestricted “abliterated” versions quickly appeared on platforms such as Abliteration.ai and Hugging Face. These versions bypass built-in refusals on harmful requests, enabling automated vulnerability research and exploit generation.

Security researchers note that even CTF participants now rely on LLMs to remain competitive, and documented cases already show models autonomously compromising real infrastructure. Analysts therefore estimate that defenders have roughly one year to remediate known vulnerabilities across widely deployed software before LLM-driven campaigns become routine.

Industry Response: Project Glasswing and Daybreak

Project Glasswing, launched by Anthropic in April 2026 with partners including AWS, Apple, Cisco, CrowdStrike, Google, Linux Foundation, Microsoft and Nvidia, and Daybreak, launched by OpenAI in September, share the same priorities: early access to frontier models for critical-infrastructure defenders, rapid patching of high-impact open-source projects, and coordinated disclosure with governments and NGOs.

Both programs have already identified large numbers of vulnerabilities in Windows, the Linux kernel and other foundational components. Their representatives stress that the remaining bottleneck is the time required to test, release and widely deploy patches to billions of endpoints worldwide.

Recommended actions for organizations include using advanced LLMs to hunt and remediate their own vulnerabilities, implementing continuous integration pipelines for security updates, retiring legacy systems, measuring patch deployment latency, auditing the full software supply chain, and monitoring the release cadence of new open-weight models.

OpenAI Anthropic CyberGym ExploitBench Daybreak GLM-5.3-Flash Project Glasswing

ShareX Facebook LinkedIn Reddit

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in AI Security

AI Security

Logical Argument Claims Full Alignment of Superintelligent AGI Is Fundamentally Impossible

A detailed analysis argues that the AI alignment problem cannot be solved for systems exceeding human cognitive capabilities. The paper presents a formal proof showing that any control mechanism created by humans will inevitably be circumvented by a more intelligent agent. It draws on foundational theorems from logic and cybernetics to support the conclusion that alignment is not an engineering challenge but a logical impossibility. Recent 2025-2026 research papers reach similar conclusions using computability theory and diagonal arguments. The work concludes that the only way to guarantee alignment is to avoid creating superintelligence altogether. All proposed restrictions are described as temporary delays rather than permanent solutions.

HabrOct 29, 2026Translated from Russian

AI Security

Claude Account Bans Linked to IP Reputation, Device Environment and Payment Channels, But No Confirmed Formula

Discussions on the Chinese forum NodeSeek have highlighted observations from a user who reported bans on more than twenty paid Claude accounts. The user identified IP address reputation, device environment traces, and payment processor history as the main factors potentially triggering blocks by Anthropic. However, the original post does not present a unified scoring system or prove specific penalties for using Linux, browser-only access, or the Fable model. High query volume is described mainly as a rate-limit issue rather than an automatic account ban trigger. Community members remain divided, with some confirming isolated observations while others label the conclusions speculative and share contradictory experiences. No universal method to avoid blocks has emerged from the discussion.

AntiMalwareOct 29, 2026Translated from Russian

AI Security

Local LLMs in AppSec: What Open Tools and Models Can Handle in Application Security

The article examines how local large language models can be integrated into application security workflows without relying on cloud subscriptions. It traces the evolution from llama.cpp in 2023 through agentic frameworks like PentAGI and Strix in 2025-2026. Teams can now run models on local hardware, connect them to code analyzers such as Semgrep, and delegate specific tasks like vulnerability path reconstruction or multi-step application testing. The piece highlights practical scenarios including static code review, dynamic testing with browser and terminal agents, and security evaluation of embedded AI assistants using tools like Garak and PyRIT. It stresses the importance of task decomposition, context management, and verification of model outputs to avoid misleading results. Hardware performance, model selection, and custom agent configurations are presented as key factors for successful adoption.

HabrOct 29, 2026Translated from Russian