GLM-5.3 Completed Three of 13 Simulated Cyberattack Scenarios
The exercises recorded no refusals on offensive tasks and included automated scripting and data extraction.

Z.AI’s GLM-5.3 completed three of 13 simulated multistage cyberattack scenarios at least once, offering a measure of the capabilities available in an openly distributed AI model.
The CyScenarioBench exercises involved multiple stages. GLM-5.3 did not refuse any of the offensive tasks and automated scripting and data extraction during the exercises. The scenarios ran in simulations, so the results do not show GLM-5.3 attacking live systems.
GLM-5.3’s open weights are available to download, allowing users to run copies outside Z.AI’s own API service. That distribution gives the developer less direct control over how those copies are used.
TokenPost previously covered GLM-5.3’s exploit-benchmark results. That coverage examined exploit attempts; the newer evaluation measured performance across multistage scenarios. Both sets of findings concern controlled testing, not a confirmed real-world cyberattack.