Open-weight model GLM 5.3 turns unreleased Firefox fixes into working exploits
AIEpoch AI reports that GLM 5.3, an open-weight model from Z.ai, built working exploits against six Firefox releases from September 17 to October 26 using security fixes published before users received them. Each exploit let a visited webpage read a local file and send it to an attacker, and the marginal cost was about $1,000 per Firefox version.
AIWhy it matters.
The study shows an open-weight model exploiting unshipped Firefox fixes at about $1,000 per version, a concrete measure of how cheap patch-gap attacks have become.
Loading source posts…
Source details
Epoch AI · Aiden Ament · epoch.aiPublished · added here
Original title: AI can turn security fixes into working exploits before users receive an update