Epoch AI 测试称 GLM 5.3 可将 Firefox 未发布安全修复转为可用攻击

AI 导读

Epoch AI 测试显示，Z.ai 的开源权重模型 GLM 5.3 在连续 6 个 Firefox 版本中，将尚未发布的安全修复转化为可用攻击，并自行构建完整漏洞利用链。

推荐理由

Epoch AI 的测试展示了模型从公开补丁中构造攻击链的能力与成本变化，也为浏览器安全评测提供了具体案例。

正文 · 原文

In Epoch AI tests, Z .ai’s open-weight GLM 5.3 turned unshipped Firefox security fixes into working attacks (i.e. built working exploits) on 6 consecutive releases.

Those fixes sit in public code before reaching the stable browser, disguised as routine changes to slow attackers.

Without a single refusal from any provider, GLM 5.3 still picked out the real patches and built a full exploit chain alone.

The result was a webpage that sent a visitor’s local file to the attacker with no further clicks, a route to stored passwords and cookies.

The researchers first spent over $100K building a safe test system, but after that, each extra Firefox hack cost only about $1,000, and the fastest took 12 hours.

Every hack also used a second Firefox bug that nobody knew about, which the AI found by itself and Mozilla fixed on October 27.

The researchers tried the same thing on Google Chrome and failed, even after spending about $100K.