Epoch: open GLM 5.3 autonomously builds attacks on six Firefox versions
Prepared by Sintelligent with the help of SI. Published in SI: . Updated: .
A widely available model sharply reduces the manual work needed to attack the gap between a public fix and users receiving an update.
In an isolated experiment, the model used public fixes not yet shipped to users and built a page that read a local file when opened. After the environment was set up, the marginal cost per successful attack was around $1000, and the fastest took 12 hours. Mozilla patched a separately discovered vulnerability in Firefox 159.0; the authors recommend shortening the gap between publishing a fix and delivering it.
Sources 2