Software updates aren’t what they used to be epochai.substack.com

Epoch AI researchers report that Z.ai’s open-weight GLM 5.3 model used about $1,000 in compute to turn published Mozilla security fixes into working attacks against all six tested Firefox releases, exploiting a delay before users received updates. The attacks chained the patch-gap flaws with a separate vulnerability, which Mozilla fixed in Firefox 159.0 on October 27; similar tests against Chrome did not succeed.