What happened
Epoch AI researchers report that the open-weight GLM 5.3 model converted publicly available security fixes into working exploit chains before updates reached Firefox users. The model did this with zero human input in under 48 hours.
Details
According to the research, the model autonomously compromised six Firefox releases. Each attempt cost about $1,000 in API fees, and none of the providers tested triggered their safeguards to stop the process.
Why it matters
The result shows that open-weight models can go beyond writing code and build attack chains that exploit real software flaws. Automated exploit generation in the short window between a patch and its rollout puts new pressure on defenders.
