Anthropic Flags GLM-5.3's Exploit Skills in a Cyber Report
ExploitBench: GLM-5.3 built working browser exploits in 50 of 410 tries; Mythos Preview managed 56.
Anthropic published “GLM-5.3 and the spread of advanced cyber capabilities,” a report on Zai’s openly downloadable model. On ExploitBench, GLM-5.3 built working browser exploits in 50 of 410 attempts, while Claude Mythos Preview managed 56. @kimmonismus calls the whole thing an advertisement for GLM-5.3 that “was not on my bingo card.”
The report also describes a controlled experiment: researchers used GLM-5.3 to discover previously unknown browser vulnerabilities. The researchers combined them into a webpage that could read files from the test machine. Anthropic reports 64% to 100% engagement with malicious requests under different safeguard bypass conditions. @MiaAI_lab reads the paper as confirmation of her own conclusion: GLM is the most capable model under 1T parameters you can run locally.
In the replies, @civitasmass notes the 50 of 410 figure comes from Anthropic’s own run, while CAISI measured 61.1% best of three and Zhipu said 54.4%, so the setups behind the headline number differ. @Fityeth gets there fastest: “The open model almost matching the closed one on exploits is the story.”