According to a Reuters report of 28 October, the AI-security evaluator Irregular tested Z.AI's open-weight GLM-5.3, released in August, across 13 multi-stage attack scenarios; in three it at least once gained access to a secured service, pivoted through the network and took control of multiple devices, and it refused no attack task. The report also cites Anthropic's September vulnerability-exploitation tests, in which GLM-5.3 scored 12% against 14% for Anthropic's access-restricted model, and NIST's CAISI rating it the strongest released open-weight model for cyber tasks, about four months behind the US frontier; the concern centres on diffusion through open weights.
From developments to evidence and analysis
Background
No explicit relationship is recorded.
Evidence
No explicit relationship is recorded.
Follow-ups / later versions
No explicit relationship is recorded.
Related questions
Cite this article
AI & Security Observatory(2026-10-28)「評価機関Irregular、中国のオープンウェイトモデルGLM-5.3が多段階サイバー攻撃を完遂と報告」『AI & Security Observatory』、第1.0版、最終更新2026-10-30。https://ai-security-observatory.org/ja/brief/brief-20261030-14/
AI & Security Observatory (2026-10-28). Evaluator Irregular reports that Z.AI's open-weight GLM-5.3 completed multi-stage cyberattacks end to end and refused no attack task, Reuters reports . AI & Security Observatory, version 1.0. Updated 2026-10-30. https://ai-security-observatory.org/en/brief/brief-20261030-14/
Version 1.0 · Publication date 28 Oct 2026 · Updated 30 Oct 2026
Revision history
- Earlier revisions have not been recorded.