According to a Reuters report of 28 October, the AI-security evaluator Irregular tested Z.AI's open-weight GLM-5.3, released in August, across 13 multi-stage attack scenarios; in three it at least once gained access to a secured service, pivoted through the network and took control of multiple devices, and it refused no attack task. The report also cites Anthropic's September vulnerability-exploitation tests, in which GLM-5.3 scored 12% against 14% for Anthropic's access-restricted model, and NIST's CAISI rating it the strongest released open-weight model for cyber tasks, about four months behind the US frontier; the concern centres on diffusion through open weights.

From developments to evidence and analysis

Background

No explicit relationship is recorded.

Evidence

No explicit relationship is recorded.

Follow-ups / later versions

No explicit relationship is recorded.

Related questions

Cite this article

AI & Security Observatory(2026-10-28)「評価機関Irregular、中国のオープンウェイトモデルGLM-5.3が多段階サイバー攻撃を完遂と報告」『AI & Security Observatory』、第1.0版、最終更新2026-10-30。https://ai-security-observatory.org/ja/brief/brief-20261030-14/

AI & Security Observatory (2026-10-28). Evaluator Irregular reports that Z.AI's open-weight GLM-5.3 completed multi-stage cyberattacks end to end and refused no attack task, Reuters reports . AI & Security Observatory, version 1.0. Updated 2026-10-30. https://ai-security-observatory.org/en/brief/brief-20261030-14/

Version 1.0 · Publication date 28 Oct 2026 · Updated 30 Oct 2026

Revision history
  1. Earlier revisions have not been recorded.