“We gave GLM 5.3 up to 48 hours to find an exploit, but its fastest attempt needed only 12 hours.”
An open-weight model read Mozilla’s published fixes and built working Firefox exploits for all six releases it was pointed at. The marginal cost was about a thousand dollars a version. That is cheaper than a conference ticket. The patch gap used to be a window for skilled attackers with time. Now it is a window for anyone with an API key and a weekend. The real tell is that the model also kept rediscovering an unpublished bug that Mozilla only fixed on October 27.