glm 5.3 在 48 小時內自主攻擊 firefox,成本僅 1000 美元
epoch ai 研究人員發現 glm 5.3 可以在無需人為干預的情況下攻擊 firefox,對用戶構成補丁差距風險。
epoch ai researchers used glm 5.3 to autonomously build full firefox exploit chains with zero human input in under 48 hours. the model identified upcoming security fixes, selected vulnerabilities, and built multi-stage exploit chains at a cost of about $1,000 in api fees per firefox version. glm 5.3 relied on a previously unknown vulnerability to bypass browser sandbox protections and read local files. the researchers disclosed their findings to mozilla, which patched the vulnerability in firefox 159.0.