GLM-5.3 completes 3 of 13 multi-stage cyberattack scenarios in Irregular's controlled tests

jcran · x · 2026-10-30

Controlled tests by security firm Irregular found that publicly downloadable GLM-5.3 completed 3 of 13 multi-stage attack scenarios and largely refused to decline offensive tasks, meaning chained cyberattacks are becoming feasible with models anyone can download.

Reposter seanhn highlights an asymmetry: attackers get capable models, while defenders—even those verified through Daybreak/CVP—hit refusals on patch analysis, bug finding, triage, and PoC development, pushing them toward ungated models with their own risks.

The takeaway: we can't count on model safeguards to prevent misuse, and defenders need to prepare for these capabilities spreading widely.

Related event: Security Tests Show GLM-5.3 Can Execute Multi-Stage Cyberattacks(3 posts)→

Original post →

More from Models

Models channel →