AI Weekly Malaysia

Anthropic's Frontier Red Team published an analysis of GLM-5.3, the latest model from Zhipu AI (Z.ai outside China), claiming it can autonomously build end-to-end cyber exploits like Anthropic's own Claude Mythos Preview did five months earlier. In Anthropic's simulated tests, simple techniques bypassed GLM-5.3's safeguards 64% to 100% of the time, while the same attacks did not succeed against safeguarded Claude models. Anthropic notes its findings broadly match NIST CAISI's Sept. 17 assessment, which called GLM-5.3 'the most cyber-capable open-weight model released to date' and placed it about four months behind the US frontier on an aggregate of CAISI cyber benchmarks — with the key difference that anyone can download GLM-5.3, while US frontier models with safeguards disabled are limited to vetted users.

Why: If you self-host or route agent traffic to open-weight models, this is the concrete number to plan around: Anthropic reports 64–100% guardrail bypass rates on GLM-5.3 with simple techniques, so any security-adjacent agent workflow (shell, browser, file, network tools) cannot rely on the model's own refusals — you need your own permission scoping and sandboxing at the tool layer. Two caveats worth holding: the bypass tests are Anthropic's own simulations against a competitor's model, and CAISI's 'four months behind' figure was measured with US cyber safeguards disabled, so quote it as a benchmark gap, not a deployment-equivalence claim. The practical decision is which model you let near privileged tools, and what audit trail you keep when you do.

Anthropic published a report claiming Zhipu AI's GLM-5.3 can generate malicious content, be used for cyberattacks, and that its safeguards can be bypassed via "several methods." The Tom's Hardware news-analysis (by Sayem Ahmed, published 30 September 2026) frames this against Anthropic's own position as a closed-source lab eyeing an IPO whose CEO Dario Amodei has called for pacing the AI frontier, while Claude Opus 5.5 and Sonnet 5.5 shipped days after those alarms were raised. The excerpt names no specific bypass techniques, model version tested, or benchmark numbers.

Why: If your agents or product route prompts through GLM-5.3 or other open-weight models, this is a competitor's claim published without methodology you can inspect in the text — so it is not grounds to swap providers. What it does change: expect enterprise buyers and procurement to ask which model version you pin and what guardrails sit in front of it, and plan your own eval of the exact checkpoint you deploy rather than relying on either lab's framing.