Topic
Model capability at finding vulnerabilities in source code and chaining exploitation stages, measured by CyberGym, ExploitBench and ExploitGym.
Ten months of production use, 12 assigned CVEs, and a two-day sweep of stolen repositories. Discovery has stopped being the bottleneck; human validation has become one.
Reality
Z.ai says its new open-weight model nears Anthropic and OpenAI on cybersecurity benchmarks. Full download access is two weeks out, which makes patch cadence the variable that matters.
Reality
Project Glasswing scanned more than 1,000 open source projects, and Anthropic says human triage became the slow part. Most teams are staffed for discovery, not response.
Reality
Z.ai says its new model tops CyberGym and leads open-source models on Terminal Bench 3.0. The weights go to Hugging Face within two weeks, which is the part security teams should read twice.
Reality
Z.ai says its 743B-parameter GLM-5.3 hits 34.5% on its own code bench using 22% fewer output tokens than GLM-5.2. The weights are still two weeks out.
Reality