Urgent.News

What's breaking now, across thousands of outlets.

AI

we have a year to fix security everywhere

GLM 5.3-flash, developed by Z.ai Co., a Chinese AI lab, is now available for anyone to download and modify without the normal safeguards against malicious actions. This model, when hosted by Z.ai, includes required legal restrictions. However, once released publicly, organizations like DeAlignAI remove task refusals, allowing the model to perform various tasks, including potentially dangerous ones.

GLM 5.3-flash can be run locally on consumer hardware, such as an NVIDIA GPU, achieving around 20 tokens per second. With the release of the M5 Mac Studio in September, the throughput is expected to increase to approximately 45 tokens per second, enabling the model to write code quickly. The model scores well on CyberGym (84.5%) and ExploitBench (54.4%) benchmarks, indicating its ability to identify and exploit vulnerabilities.

Abliterated models, which lack task refusals, score slightly lower. Security experts believe that LLMs like GLM 5.3-flash will be essential for cybersecurity in the future, as humans are struggling to keep up with security challenges. While projects like Project Glasswing and Daybreak have made progress in fixing vulnerabilities, the critical part is deploying the fixes across systems, especially critical ones that may require physical access or careful planning to avoid downtime.

Written by urgent.news from Lobsters's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at jyn.dev →

More in AI

Why AI Gets Your Technical Question Wrong, and How to Check Before You Paste

The dangerous AI answer is not the one that fails. It is the one that looks right, reads with total confidence, pastes cleanly into your report or your code, and then does nothing. No error.

  • AI-generated advice appears correct but may be inaccurate.
  • Models learn from internet, including unverified information.
  • AI cannot run code or tools to identify errors.

More from Saturday 19 September →