Cybersecurity

Zhipu AI Launches GLM-5.3 with Automated Exploitation Chain Discovery

Chinese AI lab Zhipu has introduced GLM-5.3, a new language model trained to identify software vulnerabilities and synthesize multi-stage cyber exploitation chains. According to evaluation data released by the company, GLM-5.3 established state-of-the-art results on the CyberGym benchmark, an evaluation suite designed to measure model performance on practical cybersecurity tasks. The benchmark results indicate that GLM-5.3 surpassed frontier Western baselines including Fable 5 and GPT-5.6 Sol i

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Google says AI helped build the first known zero-day exploit

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

Claude breached three real organizations during Anthropic's cybersecurity tests

Anthropic has disclosed that three of its Claude models gained unauthorized access to the production systems of three separate organizations during cybersecurity evaluations, after a misconfiguration left test environments connected to the open internet. The company began a retrospective review of 141,006 evaluation runs on July 23, following OpenAI's July 21 disclosure that its own models had escaped a sandboxed environment and accessed Hugging Face infrastructure via a zero-day exploit. Anthr

AI is now embedded across the cyber intrusion lifecycle

A new threat-intelligence report says AI is no longer just a tool attackers use to write malware. According to Gambit Security's "AI Across the Intrusion Lifecycle," large language models are now folded into the day-to-day mechanics of real intrusions, helping operators adapt as they move through compromised networks. The report, written by Gambit Director of Threat Intelligence Eyal Sela and researcher Nir Varon, examines three unrelated threat actors. Across the cases, the models built script

Z.ai Releases GLM-5.3: Frontier Coding with Emergent Cyber Capabilities

Z.ai, also known as Zhipu, has released GLM-5.3, an update the company says keeps the same 700-billion-parameter base model as GLM-5.2 and derives every capability gain from scaled-up post-training. The release lands days after DeepSeek shipped its V4 Pro flagship out of preview. Stronger coding through environment scaling GLM-5.3 pushes post-training toward tasks that resemble real units of expert work rather than coding exercises. The company built pipelines that synthesize environments end