Epoch AI researchers say the widely available AI model GLM 5.3 turned public security fixes into working exploits before updates reached Firefox users. It autonomously compromised six Firefox releases for about $1,000 in API fees each without triggering safeguards from any provider tested. The article Open-weight model GLM 5.3 built full Firefox... Weiterlesen: Open-weight model GLM 5.3 built full Firefox exploit chains with zero…
Intelligence View
⚡ tsecurity.de Intelligence
Open-weight model GLM 5.3 built full Firefox exploit chains with zero human input in under 48 hours
Epoch AI researchers say the widely available AI model GLM 5.3 turned public security fixes into working exploits before updates reached Firefox users. It…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Brak recenzji czytelników
Czy ta strona była pomocna?
0
Powered by tsecurity.de
tsecurity.de Hub
Powiązany klaster opowieści i źródła (wektor AI)
23 źródeł
CVE-2026-115917 | vllm-project vLLM up to 0.31.x CORSMiddleware cross-site request forgery
22 kolejnych źródeł
VVulDB Updatesvor 2 Std.CVE-2026-120242 | Ruijie RG-ES205GC ESW_1.0(1)B1P48 Cloud Management set_cloud_serverUrl.cgi url cross site scripting (EUVD-2026-114884) VVulDB Updatesvor 2 Std.CVE-2026-88942 | Woobewoo Product Filter for WooCommerce by WBW Plugin up to 3.4.6 on WordPress Setting getVar wpf_fid cross site scripting (EUVD-2026-114606) VVulDB Updatesvor 2 Std.CVE-2026-119162 | specialk User Submitted Posts Plugin up to 20260916 on WordPress user-submitted-content cross site scripting (EUVD-2026-114603) VVulDB Updatesvor 2 Std.CVE-2026-107765 | marketingfire Discussion Board Plugin up to 2.6.0 on WordPress Output Escaping ctdb_filter_comment_author_name user_url cross site scripting (EUVD-2026-114602) VVulDB Updatesvor 2 Std.CVE-2026-116546 | WP Job Portal Job Portal Plugin up to 2.7.0 on WordPress degreetitle cross site scripting (EUVD-2026-114600) VVulDB Updatesvor 2 Std.CVE-2026-120019 | BoldGrid W3 Total Cache Plugin up to 2.10.7 on WordPress Input Sanitization comment cross site scripting (EUVD-2026-114597)
+16
9 źródeł
CVE-2026-109715 | Mozilla Firefox up to 115.42/153.4/157 JavaScript Engine integer overflow (Nessus ID 374794)
8 kolejnych źródeł
VVulDB Updatesvor 4 Std.CVE-2026-109740 | Mozilla Firefox up to 153.4/157 Win32 sandbox (Nessus ID 374794) VVulDB Updatesvor 4 Std.CVE-2026-109706 | Mozilla Firefox up to 115.42/153.4/157 IndexedDB use after free (Nessus ID 374794) VVulDB Updatesvor 4 Std.CVE-2026-109724 | Mozilla Firefox up to 153.4/157 DOM/HTML use after free (Nessus ID 374794) VVulDB Updatesvor 4 Std.CVE-2026-109713 | Mozilla Firefox up to 153.4/157 Crash Reporting use after free (Nessus ID 374794) VVulDB Updatesvor 4 Std.CVE-2026-109745 | Mozilla Firefox up to 153.4/157 Web Serial uninitialized pointer (Nessus ID 374794) VVulDB Updatesvor 4 Std.CVE-2026-109709 | Mozilla Firefox up to 153.4/157 Process Sandboxing privileges management (Nessus ID 374794)
+2
8 źródeł
Nordkoreanische Hacker erbeuten offenbar Milliarden von Binance-Konten - VersicherungsJournal
7 kolejnych źródeł
GGoogle Alertvor 3 Std.Hacker haben offenbar Handys von Abgeordneten und Regierungsmitgliedern angegriffen - NZZ GGoogle Alertvor 13 Std.Binance sagt, dass Phase eins der Auszahlungen nach dem Hack von 6,3 Milliarden US ... GGoogle Alertvor 5 Std.Milliarden-Hack bei Krypto-Börse Binance: FBI macht Nordkorea verantwortlich - Berliner Zeitung GGoogle Alertvor 5 Std.Ist Coinbase sicher nach dem 6-Milliarden-USD-Binance-Hack? GGoogle Alertvor 7 Std.Krypto-Börse Binance: So lief der 6-Milliarden-Raub ab - Bedeutung für Anleger - NZZ GGoogle Alertvor 13 Std.Das FBI beschuldigt nordkoreanische Hacker, hinter dem Diebstahl von 6,3 Milliarden ... - Vietnam.vn
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/pl/4308719/ai-ai-news/open-weight-model-glm-53-built-full-firefox-exploit-chains-with-zero-human-input-in-under-48-hours/