September 29, 2026

In Anthropic's simulated tests, simple techniques bypass GLM-5.3's guardrails 64% to 100% of the time.

On ExploitBench, GLM-5.3 develops complete exploits in 50 attempts out of 410, against 56 for Claude Mythos Preview.

In one day, GLM-5.3 found several unknown flaws in a browser's JavaScript engine and chained them.

Abliteration takes GLM-5.3's refusal rate from more than 90% to about 3% on JailbreakBench.

The vast majority of attacks were blocked, with XSS, LFI, SQLi and Log4j near full coverage.

After human review, 49 findings were worth investigating, 48 of them CMDi and SSRF.

The work contributed to three changes in Cloudflare's Managed Ruleset, including two new SSRF detections.

Dots have their own cloud computer and can connect to over 4,000 apps through plugins.

Proactive research uses connected apps with tools restricted to be read-only.

Certain sensitive tasks, such as changing a password, always stay with the user.

The goal set is a complete post-quantum preparation for a target deadline in 2029.

The scans are done in two steps: a discovery of raw observations, then an analysis of each observation.

Without sufficient evidence, the model assigns More evidence needed, External dependency or Unknown rather than guessing.

No reference dataset yet allows reproducible comparison of the prompt versions.

The ten disclosures, published between 26 June and 24 September 2026, are classified into four classes according to the trigger point.

In the other four cases, the model was manipulated, but permissions and configuration decided the extent of the damage.

GitSpawn groups eight findings in seven command-line agents, including Claude Code, Goose, Codex and Cursor.

A correction on 13 October brings the figure from seven to six, after the reclassification of CVE-2026-55607 (Claude Code).