Epoch AI Says GLM 5.3 Built Exploits for Six Firefox Versions Using Public Fixes

1. 20:22
   The DecoderPicks

   GLM 5.3 built Firefox exploit chains without human input in under 48 hours

   Epoch AI researchers report that GLM 5.3 autonomously built exploit chains against 6 Firefox versions by exploiting the gap between publicly visible security fixes and their delivery to users. Successful attacks cost roughly $1,000 in API fees each, with the fastest taking 12 hours. Mozilla patched a previously unknown sandbox vulnerability used in the attacks in Firefox 159.0; the researchers have not confirmed whether similar attacks work against that version.

2. 05:40
   Epoch AI · XPicks

   Epoch AI finds GLM 5.3 can autonomously exploit Firefox’s patch gap

   Epoch AI reports that GLM 5.3 autonomously built successful exploits for six recent Firefox versions using public security fixes not yet shipped to users, costing about $1,000 per compromised version. The exploits could steal browser passwords and authentication cookies or read local files after a user opened one webpage. Every successful attack also used a previously unpublished vulnerability that Mozilla patched in its October 27 Firefox 159.0 release; Epoch AI has not confirmed whether the attacks still succeed without it.

Trends compare the same continuously observed participants, which may cover fewer sources than current heat. Point or click to inspect hourly heat, or use left and right arrow keys.