rotative
the decoder · October 30, 2026

GLM 5.3 autonomously exploits Firefox in 48hrs for $1K

epoch ai researchers found glm 5.3 can exploit firefox with zero human input, posing patch gap risks for users.

read in 简体中文 · 繁體中文

epoch ai researchers used glm 5.3 to autonomously build full firefox exploit chains with zero human input in under 48 hours. the model identified upcoming security fixes, selected vulnerabilities, and built multi-stage exploit chains at a cost of about $1,000 in api fees per firefox version. glm 5.3 relied on a previously unknown vulnerability to bypass browser sandbox protections and read local files. the researchers disclosed their findings to mozilla, which patched the vulnerability in firefox 159.0.

read at source ↗

← rotative