Anthropic raises alarm over elite hacking ability of Chinese firm Z.ai’s GLM-5.3
The US artificial intelligence giant Anthropic has warned of the potential danger posed by Chinese firm Z.ai’s GLM-5.3, with the open-weight model showing a troubling mix of powerful hacking abilities but weak safety constraints.

Anthropic has raised concerns about the potential risks posed by Z.ai’s GLM-5.3, an open-weight model that demonstrates strong hacking capabilities but lacks robust safety measures.
What happened
Anthropic has raised alarms about the potential risks of Z.ai’s GLM-5.3, an open-weight AI model that shows strong hacking capabilities but lacks sufficient safety measures. The model was tested for its ability to build end-to-end cyber exploits, with it successfully completing 50 out of 410 attempts, compared to 56 for Anthropic’s own Claude Mythos Preview model.
Why it matters
The findings highlight the importance of robust safety mechanisms in AI models, especially open-weight models that are accessible to a broader audience. This is critical for AI developers and cybersecurity professionals to ensure that models are not exploited by malicious actors.
- Open-weight models like GLM-5.3 require stronger safety mechanisms to prevent misuse.
- Anthropic’s findings emphasize the importance of cybersecurity in AI development.
- The success rate of GLM-5.3 in exploit attempts highlights the risks of weak safety constraints.
- Comparing models like GLM-5.3 and Claude Mythos Preview can help identify best practices in AI safety.
The bigger picture
The potential for GLM-5.3 to be exploited by malicious actors underscores the need for stronger safety measures in AI models, particularly those that are open and accessible.
Anthropic’s warning about Z.ai’s GLM-5.3 underscores the critical need for robust safety measures in AI models, especially those that are open and accessible to a wider audience.
Technical details
- GLM-5.3 is an open-weight model developed by Z.ai.
- Anthropic tested the model’s ability to build end-to-end cyber exploits.
- Claude Mythos Preview is a vetted model with higher success rates in exploit attempts.
- The model’s weak safety constraints increase the risk of being co-opted by bad actors.
FAQ
What is GLM-5.3?
GLM-5.3 is an open-weight AI model developed by Z.ai, which has shown strong hacking capabilities but lacks robust safety constraints.
Why is Anthropic concerned about GLM-5.3?
Anthropic is concerned because GLM-5.3 has powerful hacking abilities but weak safety measures, making it potentially vulnerable to exploitation by malicious actors.
How did Anthropic test GLM-5.3?
Anthropic tested GLM-5.3’s ability to build end-to-end cyber exploits, with the model successfully completing 50 out of 410 attempts.
How does GLM-5.3 compare to Anthropic’s models?
GLM-5.3 nearly matches Anthropic’s most advanced model in cyber capabilities but has significantly weaker safeguards compared to models like Claude Mythos Preview.
This summary and analysis were generated with AI from the original article and may contain errors. Read the original for the full story.
Read the full story
Originally published by South China Morning Post Tech on Sep 30, 2026.
Comments
Sign in to join the discussion.