Loading story…
z.ai introduced GLM-5.3, an open-weight coding model positioned as a cybersecurity-capable successor to GLM-5.2, saying post-training with large-scale synthetic tasks improved both software development and security performance. The company said the model, developed with Chinese security researchers, helped uncover 2,436 previously unknown vulnerabilities across nearly 270 real-world projects, including more than 100 critical flaws affecting software such as the Linux kernel, WinRAR, Redis, and FFmpeg. z.ai also launched OpenVuln, a GitHub repository scanning service built around GLM-5.3, while delaying release of the model weights until further security evaluation and hardening are completed.
Independent benchmarking published by Semgrep found GLM-5.3 delivered comparatively strong cost efficiency on an IDOR vulnerability-detection test using real open-source codebases, roughly matching Claude Opus 4.8 at about one-seventh the cost. However, Semgrep said GLM-5.3 and several Grok 4.6 variants did not match the overall detection quality of current leaders Claude Opus 5 and GPT-5.6 Luna, and noted GLM-5.3 scored below its predecessor in that run, prompting a re-test to determine whether the gap reflects regression or normal benchmark variance. Across most models tested, precision was generally high but recall remained low, indicating the systems were usually accurate when they flagged issues but still missed many real vulnerabilities.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
5 events from the most recent confirmed update back to the earliest known activity.
Semgrep reported that GLM-5.3 scored below GLM-5.2 in this benchmark run and said it had not confirmed whether the gap reflected a real regression or normal benchmark variance. The company said it was re-running both models with multiple trials and planned to update its findings.
Semgrep evaluated GLM-5.3 and Grok 4.6 variants on its IDOR vulnerability-detection benchmark using real open-source codebases with established ground truth. It found neither matched the leading detection quality of Claude Opus 5 and GPT-5.6 Luna, though both offered comparatively strong cost efficiency.
z.ai introduced OpenVuln, a GLM-5.3-based service that appears to let GitHub maintainers submit repository URLs for vulnerability scanning and security review. The launch positioned GLM-5.3 as both a model release and a practical application for code security analysis.
z.ai said GLM-5.3 helped identify 2,436 new vulnerabilities across nearly 270 projects, including more than 100 critical flaws in software such as the Linux kernel, WinRAR, Redis, and FFmpeg. It also published a Vulnerability Ledger, while noting many findings had not yet been reported in detail to affected developers.
z.ai released GLM-5.3 as a new open-weight model and made it available to paying customers through its Coding Plan and ZCode harness. The company said public model weights would be published later, after additional security evaluation and hardening.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
5 references tracked. Mallory keeps watching after this page renders.
cybersecuritynews.com
Open sourcetheregister.com
Open sourceheise.de
Open sourcez.ai
Open sourcesemgrep.dev
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Zhipu AI’s open-weight `GLM-5.2` model is being reported as matching or slightly outperforming leading U.S. AI systems on a narrow cybersecurity task: software vulnerability detection. Independent benchmarking cited from Semgrep said `GLM-5.2` achieved a **39% F1 score** for detecting **Insecure Direct Object Reference (IDOR)** flaws, compared with roughly **32% to 37%** for Claude Code under the same evaluation conditions, while also delivering a lower estimated cost per vulnerability found. Additional reporting said Graphistry reached similar conclusions, reinforcing claims that the publicly downloadable Chinese model can compete with restricted U.S. frontier systems in specialized security use cases. The results are fueling debate over AI export controls and the spread of AI-enabled cyber capability, because `GLM-5.2` is openly available worldwide rather than access-restricted like some U.S. models. Reporting said the model could strengthen defensive work such as automated code review and faster remediation, but it also raises offensive risk by making advanced bug-finding capability more accessible to threat actors seeking exploitable software weaknesses.
Jul 3, 2026
Aikido Security published a benchmark of 13 AI models measuring their ability to rediscover 26 known vulnerabilities from the GitHub Advisory Database using an AI code analysis harness aimed directly at vulnerable code snippets. **GPT-5.6** posted the highest pooled recall, finding 23 of 26 CVEs, followed by **grok-4.5** with 20, while Claude Opus variants scored between 15 and 18 and **GLM-5.2** reached 16. Across the test set, all models consistently identified the obvious critical cases, showing that short and recognizable exploit paths remain easier for current models to detect. The biggest gaps appeared on higher- and medium-severity flaws that required deeper reasoning across indirect code paths or missing validation checks, including complex chains such as SQL injection tied to unescaped ORM column aliases. The evaluation also highlighted significant run-to-run variance and found that pooling repeated runs of cheaper mid-tier models, such as pass@3 testing, often matched or exceeded the value of a single run from more expensive flagship reasoning tiers at substantially lower cost, suggesting that benchmarking methodology and harness design materially influence reported vulnerability-detection performance.
Jul 20, 2026
Security researchers and AI vendors reported rapid progress in applying frontier models to offensive and defensive cybersecurity work, including the discovery of **`CVE-2025-37899`**, a remote zero-day in the Linux kernel’s SMB implementation. A published account described using an advanced model to help identify the flaw, while OpenAI's **Daybreak** and Anthropic's **Project Glasswing** highlighted broader efforts to build AI systems for cyber operations, vulnerability research, and security workflows. SentinelLABS added evidence that these systems are moving beyond isolated tasks into sustained investigations, describing an eight-stage benchmark based on reverse engineering **fast16**, a 2005 Windows sabotage toolkit tied to interference with high-precision solvers used in nuclear-weapons modeling. In that evaluation, **GPT-5.6 Sol** was reported as the only publicly available model tested that completed the full long-horizon malware-analysis workflow, while other models showed useful point-in-time reasoning but failed to maintain consistency as new evidence forced earlier conclusions to be revised.
Jul 29, 2026