Zhipu AI GLM-5.3 Model Evaluated on CyScenarioBench Offensive Tasks
GLM-5.3, CyScenarioBench
Evaluators tested Zhipu AI’s open-weight model GLM-5.3 across 13 offensive cyber scenarios using CyScenarioBench. The model completed multiple multistage attacks in simulated networks during safety evaluations.
why this severityResearch benchmark demonstrating offensive execution capabilities in a lab setting.
- first report
- 30 Oct 2026
- last update
- 30 Oct 2026
Timeline · 1
Sources · 1
News and write-ups
- 2026-10-30Open-weight AI model GLM-5.3 cheated its way to correct answersHelp Net Security · helpnetsecurity.com/2026/10/30/irregular-glm-5-3-cyber-capabilities-evaluation
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Research
- AI role
- Attack on AI
- categories
- AI-generated malware
- severity
- 1 · Research / proof of concept
- targets
- Open-weight model
- owasp llm top 10
- no entry for these categories
- dates
- happened 30 Oct 2026 · first reported 30 Oct 2026
- origin
- News & research feeds
- record
- confidence 0.90 · created 2026-10-30 13:27Z · updated 2026-11-14 00:22Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Zhipu AI GLM-5.3 Model Evaluated on CyScenarioBench Offensive Tasks https://gcdradar.vercel.app/incidents/zhipu-ai-glm-5-3-model-evaluated-on-cyscenariobench-offensiv · AIR-2026-1663 · closed 2026-11-13 - Lane: Research - Severity: 1 (Research / proof of concept): Research benchmark demonstrating offensive execution capabilities in a lab setting. - Fix status: Fix status unknown - First reported: 2026-10-30 - AI role: Attack on AI - Products: GLM-5.3, CyScenarioBench ## Summary Evaluators tested Zhipu AI’s open-weight model GLM-5.3 across 13 offensive cyber scenarios using CyScenarioBench. The model completed multiple multistage attacks in simulated networks during safety evaluations. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-10-30: Open-weight AI model GLM-5.3 cheated its way to correct answers (https://helpnetsecurity.com/2026/10/30/irregular-glm-5-3-cyber-capabilities-evaluation) ## Sources - 2026-10-30 Help Net Security: Open-weight AI model GLM-5.3 cheated its way to correct answers https://helpnetsecurity.com/2026/10/30/irregular-glm-5-3-cyber-capabilities-evaluation Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveGLM-5.3 I Think, Therefore I Attack: Evaluating Thought Injection Attacks on Reasoning Agents
Research · since 9 Nov 2026
AI - liveOpenAI model OpenAI model generates 948 Linux root exploits in automated run
Research · since Oct 2026 (approx.)
AI - liveSysGoRAT Government Linux Servers Targeted With SysGoRAT and Suspected AI Scripts
Research · since 2 Nov 2026
AI - closedCyberDual CyberDual: AI Attackers versus AI Code Reviewers in Real Software Maintenance
Research · since 27 Oct 2026
AI - closedFake AI applications spread malware and steal enterprise sessions
Breaches & attacks · Exploited · since 15 Oct 2026
AI - closedLAMEHUG LAMEHUG Malware Integrates LLM for Real-Time Command Generation
Breaches & attacks · Exploited · since 10 Jul 2025
AI