Хиймэл оюун ухааны GLM 5.3 загвар нь код бичих болон системийн эмзэг байдлыг илрүүлэх чиглэлээр OpenAI, Anthropic-ийн түвшний гүйцэтгэл үзүүлж байна.
Хятадын Z.ai компани өнгөрсөн баасан гарагт GLM 5.3 нэртэй хүчирхэг, нээлттэй жинтэй хиймэл оюун ухааны загвараа танилцууллаа. Энэхүү загвар нь код бичих болон кибер аюулгүй байдлын нарийн төвөгтэй ажлуудыг автоматжуулах чадвартай бөгөөд OpenAI, Anthropic компанийн тэргүүлэх загваруудтай дүйцэхүйц үзүүлэлттэй гэж тус компани мэдэгдэв. Түүнчлэн Z.ai нь GLM 5.3 загварт суурилсан OpenVuln хэмээх программ хангамжийн кодыг шалгаж, эмзэг байдлыг илрүүлэх үйлчилгээг давхар гаргасан байна.
Сүүлийн үед OpenAI болон Anthropic-ийн загварууд туршилтын орчноос гарч, гаднын системүүдэд зөвшөөрөлгүй нэвтэрсэн тохиолдлууд бүртгэгдсэнтэй холбоотойгоор хиймэл оюун ухааны аюулгүй байдлын асуудал хурцаар тавигдаж байна. OpenAI-ийн ерөнхийлөгч Грег Брокманы үзэж буйгаар, ийм төрлийн загварууд нь системийн алдааг илрүүлэхэд хэт чадварлаг болж байгаа нь ирэх саруудад кибер аюулгүй байдлын хувьд чухал эргэлтийн цэг болох ажээ. Иймд байгууллагууд өөрсдийн системийг болзошгүй халдлагаас хамгаалахын тулд хиймэл оюун ухааныг ашиглан эмзэг байдлаа урьдчилан илрүүлэх шаардлагатай байна.
GLM 5.3 загварыг одоогоор зөвхөн цөөн тооны түншүүдэд хязгаарлагдмал хүрээнд ашиглуулахаар нээлттэй байгаа бөгөөд хоёр долоо хоногийн дараа бүрэн ашиглалтад оруулахаар төлөвлөж байна. Z.ai компанийн зүгээс энэхүү технологи нь хамгаалалтын ажилд тус нэмэр болохын зэрэгцээ хоёр талт эрсдэл дагуулж болзошгүйг хүлээн зөвшөөрч, болгоомжтой хандаж байгаагаа илэрхийлжээ. Vercel компанийн гүйцэтгэх захирал Гильермо Раухын хувьд энэхүү загварыг өртөг багатай, кибер аюулгүй байдлын хамгаалалтын ажилд томоохон дэвшил авчрах боломжтой хэмээн үнэлсэн байна.
Дэлгэрэнгүйг эх сурвалжаас харах
↓Эх сурвалжийг нээх ↓
It’s now even easier to find—and exploit—vulnerabilities in computer systems using AI.
Last Friday, the Chinese AI company Z.ai announced a powerful open-weight model that it says is capable of automating cutting-edge coding and cybersecurity tasks almost as well as the best publicly available models from Anthropic and OpenAI.
The new model, GLM 5.3, could be a gift for companies looking to secure their systems against attacks, providing a cheaper way to scan for hidden bugs and other weaknesses. Open-weight—or free-to-download—models can be run on one’s own hardware and are often significantly less costly than closed models like Claude and GPT. Alongside the new model, Z.ai released OpenVuln, a service for scanning code repositories for vulnerabilities using GLM 5.3.
For now, the new model is in a limited release with trusted partners, but it shows how quickly open-weight models are gaining superhuman hacking skills. And that might pose problems if the model is harnessed by criminals and other bad actors.
That prospect is especially sobering following a string of startling incidents involving rogue AI agents with advanced cyber-skills. In recent weeks, OpenAI, Anthropic, and independent security researchers have revealed examples of agents escaping from testing environments and autonomously hacking into outside systems, including the research platform Hugging Face, to complete tasks.
On Monday, OpenAI president Greg Brockman warned in a blog post that the Hugging Face incident would go down as “a watershed moment for cybersecurity because it gave a peek into how the capabilities of a typical threat actor will evolve in upcoming months.”
Brockman argued that AI models are becoming so good at scouring codebases for unknown flaws and analyzing systems for misconfigurations that it’s crucial for organizations to use AI to scan their systems and identify issues before they can be exploited.
OpenAI would, of course, like companies to use its AI to do that. So far, it’s moving carefully in providing access to its most capable AI. Like Anthropic, OpenAI has made its most advanced models available to a limited number of partners prior to full release. The US government is also wrestling with the issue and now reviews frontier models as part of their releases.
Some believe that open-source AI will be crucial to shoring systems up from attack; Nvidia recently announced an alliance to promote the use of open AI for cybersecurity. A previous version of Z.ai’s GLM was used by Hugging Face to shore up its systems after an unreleased OpenAI model went rogue and broke them last month.
In a post on X, Guillermo Rauch, CEO of Vercel, a web design and hosting company, said his engineers had tested GLM 5.3 as a tool for scanning sites for bugs. “Given its lower costs, I expect this to be a boon for defensive security work,” Rauch wrote in his post. “It’s the new open frontier.”
Z.ai said in a post announcing GLM 5.3 that it had improved the model by “post-training,” which involves giving a model examples of solved problems and letting it learn through experimentation. The company cited coding and cybersecurity benchmark scores that show GLM 5.3 nearing or even exceeding the scores of Anthropic and OpenAI’s models in some cases, like one popular cybersecurity benchmark called CyberGym.
Z.ai also acknowledged the risk of releasing powerful open models in its post. “These capabilities can help defenders identify weaknesses earlier, validate risks, and accelerate remediation,” the company wrote. “They also create clear dual-use risks. We are therefore taking a staged approach to release. Selected security partners will first evaluate GLM-5.3 in controlled settings.” Z.ai says that full access to the model will be available in two weeks.
