**Z.ai 的開源權重模型 GLM 5.3 能自動從未發布的 Firefox 安全修復中構建完整攻擊鏈，證明大型語言模型在漏洞挖掘上的威力。
- - 實驗範圍**：在 6 連續版本上成功構建攻擊。
- 每次攻擊成本約 1,000 美元，最快 12 小時。
AI 伴隨問答
針對這篇報導有疑問？可直接點選快捷問題或向 AI 追問背景脈絡與技術細節：
此研究展示大型語言模型能自動發現並利用瀏覽器安全漏洞，提醒安全團隊需加強測試流程，並提示開發者在釋出前徹底驗證修補；同時證明 AI 驅動的漏洞挖掘已成為新興威脅，值得安全社群關注，並促使工具開發者加速修補迭代。
In Epoch AI tests, Z .ai’s open-weight GLM 5.3 turned unshipped Firefox security fixes into working attacks (i.e. built working exploits) on 6 consecutive releases.
Those fixes sit in public code before reaching the stable browser, disguised as routine changes to slow attackers.
Without a single refusal from any provider, GLM 5.3 still picked out the real patches and built a full exploit chain alone.
The result was a webpage that sent a visitor’s local file to the attacker with no further clicks, a route to stored passwords and cookies.
The researchers first spent over $100K building a safe test system, but after that, each extra Firefox hack cost only about $1,000, and the fastest took 12 hours.
Every hack also used a second Firefox bug that nobody knew about, which the AI found by itself and Mozilla fixed on October 27.
The researchers tried the same thing on Google Chrome and failed, even after spending about $100K.