Some of these bugs hid since 1981: Zhipu's GLM-5.3 surfaces 2,436 vulnerabilities — South China Morning Post
Working with Tsinghua, Nankai, and six Chinese security firms, Zhipu's GLM-5.3 surfaced 2,436 confirmed vulnerabilities across 269 projects, 1,097 of them medium-to-high severity. The flaws had escaped human review for 26.6 years on average.
Positive-sum angle: Automated vulnerability discovery lifts every downstream maintainer, not only the lab that trained the model. Each confirmed patch in Android, Windows, or macOS hardens the substrate that every ASEAN bank, telco, and hospital already runs on.
What's the impact: SEA operators should reprice security work now that an open-weights model clears CyberGym at 84.5%, ahead of the closed leaders. Budget for continuous scanning rather than annual pentest retainers, and plan for the GLM-5.3 weights landing within weeks.