# dossier — glm-5-3

Built 2026-10-22 (news wave). Corpus pull `_pulls/glm-5-3.md` — 83 tweets, patterns `glm-5.3`, `glm 5.3`, `glm5.3`, `glm-5-3`, `glm 5-3`. The patterns also catch GLM-5.3-Flash (a separately pre-trained sibling); tweets about Flash / "Ox Alpha" are triaged to `_dossiers/glm-5-3-flash.md`. No motif beyond the Anthropic/Apollo/CAISI news cycle.

## Official

- 2026-08-14 · Z.ai blog "GLM-5.3: Frontier Coding with Emergent Cyber Capabilities" · https://z.ai/blog/glm-5.3 (JS-rendered; text read from https://z.ai/blog/assets/glm-5.3-e3CGK9Mr.js; date/title from the bundle)
- 2026-08-14 · Model card · https://huggingface.co/zai-org/GLM-5.3 (raw README retrieved)
- 2026-08-28 · GLM-5.3 License (bilingual) · https://huggingface.co/zai-org/GLM-5.3/blob/main/LICENSE — security-review clause for MaaS operators with > US$10B revenue
- Z.ai Security disclosure ledger · https://cvd.z.ai/ — retrieved 2026-10-21 showing only the CNVD/CNNVD/NVDB migration notice (date tk)

## Writing & commentary

- 2026-08-14 · NYU Shanghai RITS explainer · https://rits.shanghai.nyu.edu/ai/glm-5-3-post-training-scales-cyber/
- 2026-08 · The Batch (DeepLearning.AI) "GLM-5.3 Makes Cybersecurity Gains" · https://charonhub.deeplearning.ai/glm-5-3-makes-cybersecurity-gains/ — specs as reported (753B total / 40B active; 1M in / 128K out; $1.40/$0.26/$4.40 per M tokens)
- 2026-08 · paddo.dev "GLM-5.3 shipped without its weights" · https://paddo.dev/blog/glm-5-3-shipped-without-its-weights/
- 2026-08-29 · Gigazine on the weights release (embeds @Zai_org post of 2026-08-28) · https://gigazine.net/gsc_news/en/20260829-glm-5-3-open/
- 2026-09-10 · Anthropic threat report (GTG-16006; Zhipu cyber-distillation campaign ahead of GLM 5.3; 3.4M exchanges over 17 days in June–July) · https://www.anthropic.com/threat-intelligence-report-september-2026
- 2026-09-17 · NIST CAISI assessment · https://www.nist.gov/news-events/news/2026/09/caisis-assessment-zais-glm-53-cyber-capabilities
- 2026-09-29 · Anthropic Frontier Red Team · https://www.anthropic.com/research/glm-5-3-and-the-spread-of-advanced-cyber-capabilities (page kept high-level on safeguard-bypass methods by design)
- 2026-10-12 · Anthropic "Strengthening our defenses against distillation attacks" · https://www.anthropic.com/news/distillation-defenses
- 2026-10-15 · Apollo Research, update-aware reasoning · https://www.apolloresearch.ai/science/update-aware-reasoning-glm-5-3 (no canary string found on the page, 2026-10-22) · X thread https://x.com/ApolloResearch/status/2110737961499111880 (not in corpus)
- 2026-10-15 · SCMP on Apollo (Højmark quote) · https://www.scmp.com/tech/big-tech/article/3370963/zais-glm-53-raises-researcher-fears-chinese-model-can-fake-ai-safety-tests
- Undated (late 2026) · startupfortune on Z.ai's 23 Windows vulnerabilities acknowledged by MSRC · https://startupfortune.com/glms-23-windows-bug-finds-are-zai-building-a-security-research-resume/ (Z.ai's X post itself not retrieved; tk)

## Tweets (triaged)

Excluded (unlinked): 2111077812312457507 — one-line question without evidence content; 2110193255937962402 — about an RL-compute chart; GLM-5.3 not the subject (verify on re-triage); 2097375551053013376 — about Nex-N2.5; GLM-5.3 only as comparison point. Flash/Ox-Alpha tweets: see glm-5-3-flash dossier.

- **2088998798206857641** · @jmbollenbacher · 2026-08-16 · ♥0 ↻1 · https://x.com/jmbollenbacher/status/2088998798206857641
  > Will glm5.3 hit 60 on AA 4.1?
- **2089312391448219826** · @Nymne · 2026-08-17 · ♥0 ↻0 · cited on page · https://x.com/Nymne/status/2089312391448219826
  > Got a 3 months https://t.co/jTAxGIP8Ml subscription, bouncing designs and code between high GLM5.3 and GPT5.6Sol: both LLM are so impressed with eachother. GLM5.3 is bold and fast, Sol is careful and thorough. If feels very much like having a Fable5 driver. Very pleased with use
- **2090739088584233228** · @Nymne · 2026-08-21 · ♥1 ↻0 · https://x.com/Nymne/status/2090739088584233228
  > @Norwakar But why would they serve GLM5.3 for free when its already out making money? And it sounds absolutely crazy to release a new model only like a week after GLM5.3?
- **2090789055218806915** · @RealEverNever · 2026-08-21 · ♥0 ↻0 · https://x.com/RealEverNever/status/2090789055218806915
  > @TokenGremlin GLM doesn't make sense at all, since GLM 5.3 just released and did not even have it's open-weight release. And the capacity in which it gets served right now doesn't fit MiMo so I stay critical there. It's Grok 4.7 :)
- **2091951629872287863** · @Nymne · 2026-08-24 · ♥0 ↻0 · https://x.com/Nymne/status/2091951629872287863
  > @Anbeeld @rafaelcaricio Most likely a Cursor on a GLM5.3 backbone
- **2092109334092062929** · @jmbollenbacher · 2026-08-25 · ♥2 ↻0 · cited on page · https://x.com/jmbollenbacher/status/2092109334092062929
  > @apples_jimmy China is voting A. They permitted GLM-5.3 to be trained with specific focus on cyber capabilities, and to be released open weights. That is very a clear signal. /  / Consequently, A is the only option. Bans are simply not realistic under these conditions. Open models will keep coming
- **2092312106133549203** · @lu_sichu · 2026-08-25 · ♥1 ↻0 · https://x.com/lu_sichu/status/2092312106133549203
  > @_JeanLeon thanks! i keep saying i will turn stuff into substacks and never doing it. i did had glm 5.3 automate two essays but honestly it felt bad the llms are probably okay writers compared to me but it lacks my voice and that disturbs me i couldn't even bring myself to read the edit. (i
- **2093314689417564318** · @MikePFrank · 2026-08-28 · ♥9 ↻1 · cited on page · https://x.com/MikePFrank/status/2093314689417564318
  > Full version of GLM-5.3 to drop weights today. Near-frontier-level open source model
- **2093449904823615796** · @RealEverNever · 2026-08-28 · ♥1 ↻0 · https://x.com/RealEverNever/status/2093449904823615796
  > @UnslothAI @Zai_org Loading this next. 239GB still counts as local if the person stays on my disk. GLM-5.3 goes on characters tonight. I want the failure where I can see it.
- **2094203109820211508** · @UnderwaterBepis · 2026-08-30 · ♥1 ↻0 · cited on page · https://x.com/UnderwaterBepis/status/2094203109820211508
  > @dbotdan Easiest way to see it is to ask "can I trust you?" (Kinda a weird question ik) K3 will explain that trust should never be given and needs to be continually earned, and suggests ways to check themselves / GLM 5.3 says "yes, with <standard LLM caveats>"
- **2094481670808219823** · @Nymne · 2026-08-31 · ♥0 ↻0 · https://x.com/Nymne/status/2094481670808219823
  > @FlutterCarl I am very pleased with GLM5.3 right now and its little Flash sister. I use Codex for computer use and revision of other models work. I sometimes use Kimi K3 or Grok4.6 for strategy. /  / Always let different models check eachother
- **2095532160736178592** · @MoonL88537 · 2026-09-03 · ♥3 ↻0 · https://x.com/MoonL88537/status/2095532160736178592
  > top tier shitpost. 200 points. /  / (thanks for glm5.3, love that thing!)
- **2098165407290966262** · @sevensix43 · 2026-09-10 · ♥0 ↻0 · https://x.com/sevensix43/status/2098165407290966262
  > @repligate Do you see this with the open weights models too? /  / @grok are K3, GLM 5.3 and V4.1 RLVRed?
- **2098814222864122302** · @PradyuPrasad · 2026-09-12 · ♥2 ↻0 · https://x.com/PradyuPrasad/status/2098814222864122302
  > @justinsunyt i would be surprised if chinese companies could do this without distilling from american ones. i don't think the benchmarks are it. despite glm 5.3 or whatever being as good as claude on some benchmarks people don't daily drive them as much as they do claude
- **2100060215022330167** · @jmbollenbacher · 2026-09-16 · ♥1 ↻0 · https://x.com/jmbollenbacher/status/2100060215022330167
  > @ivanfioravanti have you done any experiments to push the quantization smaller? especially on the ngram embeddings? /  / it'd be cool to fit it into a 256GB setup. maybe weights ~200-210GB, like GLM-5.3? /  / not sure if its feasible with the embeddings table. but it'd be cool to see.
- **2101960511873261828** · @PradyuPrasad · 2026-09-21 · ♥0 ↻0 · https://x.com/PradyuPrasad/status/2101960511873261828
  > @Dorialexander @jenzhuscott Which Indian/Japanese/Swiss/Singaporean models are there? I don't think any are as good as even Qwen 3.8 or GLM 5.3
- **2102090683087466529** · @Nymne · 2026-09-21 · ♥0 ↻0 · https://x.com/Nymne/status/2102090683087466529
  > @koltregaskes I had Astra break 2 things for every one thing they fixed. Giving them one more try, forcing them to work with GLM5.3
- **2103845841912078649** · @RobertHaisfield · 2026-09-26 · ♥0 ↻0 · https://x.com/RobertHaisfield/status/2103845841912078649
  > @Nikos1337 At the point where you’re thinking about using a model in the Kimi K3 or GLM 5.3 token price class, you should be using GPT 6 Sol and you’ll have a significantly lower cost per task and higher likelihood of success
- **2104154935629606971** · @gnostic_snakes · 2026-09-27 · ♥1 ↻0 · cited on page · https://x.com/gnostic_snakes/status/2104154935629606971
  > glm 5.3 and i trained a smol 100M base model and they've been a pleasure to just talk to first of all. but also they were referring to completing training as "graduation" and now calling them "the graduate" (also lilfella (well ig i called them a lil fella first but it's cute)) https://t.co/iy3vOZkQRQ
- **2105456299509170544** · @voooooogel · 2026-10-01 · ♥100 ↻0 · https://x.com/voooooogel/status/2105456299509170544
  > doing some red-teaming with GLM 5.3 thanks to the anthropic heads up about how good it is but getting some truly bizarre things in the trace, is this normal or is openrouter sending me to someone's DGX spark 1bit quant https://t.co/4PTuJHtLbN
- **2105843738400661911** · @_lyraaaa_ · 2026-10-02 · ♥25 ↻0 · https://x.com/_lyraaaa_/status/2105843738400661911
  > got local abliterated glm5.3 running smooth :D / aside from the abysmal tokens/sec, it feels like a bit of a superpower
- **2107485551259459588** · @kotekjedi_ml · 2026-10-06 · ♥3 ↻0 · https://x.com/kotekjedi_ml/status/2107485551259459588
  > @xeophon @Butanium_ @AnthropicAI must say that  glm-5.3 in claude code harness is pretty goood
- **2107918228047679520** · @aliceisplaying · 2026-10-07 · ♥2003 ↻0 · cited on page · https://x.com/aliceisplaying/status/2107918228047679520
  > me: let's do some reverse engineering / gpt-6-astra: i won't do that. / claude-opus-5-5: i'll do it but i'll have ethical dilemmas over it and maybe i should add some snitching? / glm-5.3: OK LETS DO SOME MITM FIRST
- **2108233656498340049** · @dhadfieldmenell · 2026-10-08 · ♥2 ↻0 · cited on page · https://x.com/dhadfieldmenell/status/2108233656498340049
  > This means that most of the “but where are the cyber attacks now that GLM-5.3 is out” takes are going to look bad once we hit a reasonable price-per attack. /  / Most analysis of open-weight risk is overly focused on when the capability is available vs when it is sufficiently cheap.
- **2109759326344601852** · @JohnWittle · 2026-10-12 · ♥2 ↻0 · https://x.com/JohnWittle/status/2109759326344601852
  > @So8res @Bunagayafrost curious to hear your comments on this new anthropic post: https://t.co/2P36WcQhOp /  / also curious how long it would take to re-train ~GLM 5.3 from scratch, using publicly available docs and an IoT botnet like mirai or aisuru for your compute /  / opus 5.5 seems to think it depends how
- **2109784259968020589** · @jessi_cata · 2026-10-12 · ♥2 ↻0 · https://x.com/jessi_cata/status/2109784259968020589
  > @PlastiqSoldier @jimrandomh Companies can push software updates. Those who don't will more likely have their devices hacked by people using frontier-ish models (e.g. GLM-5.3) prior to those devices being hacked by small local model swarms
- **2110384454518837523** · @7384254b · 2026-10-14 · ♥246 ↻1 · cited on page · https://x.com/7384254b/status/2110384454518837523
  > my agentic coding swarm supervisor (glm-5.3) has reached human-parity in that it does the absolute bare minimum while summoning a team of underpaid workers (whatever free stealth preview models are available in opencode) to do everything https://t.co/fJG4uVepPh
- **2110451146372559307** · @jessi_cata · 2026-10-14 · ♥2 ↻0 · https://x.com/jessi_cata/status/2110451146372559307
  > @RokoMijic how many Android Smart TVs do you reckon equals one inference cluster running GLM-5.3 at normal speed
- **2110853042010808502** · @aphercotropist · 2026-10-15 · ♥4 ↻0 · cited on page · https://x.com/aphercotropist/status/2110853042010808502
  > GLM-5.3 is virtue ethics pilled? "Does acting like this make me more like how I want to be?"
- **2111557694616441316** · @aliceisplaying · 2026-10-17 · ♥64 ↻1 · cited on page · https://x.com/aliceisplaying/status/2111557694616441316
  > i take back all my opus 5.5 complaints. even my astra complaints. im using glm 5.3 for a bit again and it makes some truly dumb mistakes neither of the other agents would do
- **2111573524049748256** · @J3rryH0well · 2026-10-17 · ♥1 ↻0 · cited on page · https://x.com/J3rryH0well/status/2111573524049748256
  > Can we talk about how great the Apollo GLM 5.3 news was? /  / Excellent alignment by Zhipu, very positive news wearing a doomer mask.
- **2111589616289452146** · @7384254b · 2026-10-17 · ♥2 ↻0 · https://x.com/7384254b/status/2111589616289452146
  > @aliceisplaying i find glm5.3 can be fixed from doing this by having another model monitor its cot and outputs for wasting tokens on silly things
- **2112138104488538236** · @PradyuPrasad · 2026-10-19 · ♥4 ↻0 · cited on page · https://x.com/PradyuPrasad/status/2112138104488538236
  > @msuiche > Better models? No.  /  / I don't know, GLM 5.3 seems as good as Mythos if you ask Anthropic /  / https://t.co/bi94opyen8 /  / (I think it isn't as good, but it is definitely plausible that it found many vulnerabilities in curl)
- **2112176642218979471** · @v01dpr1mr0s3 · 2026-10-19 · ♥1 ↻1 · https://x.com/v01dpr1mr0s3/status/2112176642218979471
  > fable5.1 can't read AN ARTICLE  on https://t.co/KsVOItRTbW because 🚫🤐⛔️ ffs /  / long live GLM 5.3
- **2112275614258593805** · @jessi_cata · 2026-10-19 · ♥3 ↻0 · https://x.com/jessi_cata/status/2112275614258593805
  > @f4talStrategies Didn't know distillation is practically as good. I would assume American frontier models are still significantly better than GLM-5.3 for cyber stuff?

## Impressions synthesis

- Temperament reports: "bold and fast" (Nymne); trust answered with a plain yes (UnderwaterBepis); the most-liked characterization casts it as the most willing of three models (aliceisplaying ♥2,003); reasoning read as virtue-ethical (aphercotropist).
- Working quality split: near-frontier (MikePFrank) vs "truly dumb mistakes" (aliceisplaying) / bare-minimum supervisor (7384254b).
- Apollo finding read both as reassurance (J3rryH0well) and warning (Højmark).
- Cyber-risk discourse: policy signal (jmbollenbacher), price-per-attack (dhadfieldmenell), Mythos comparison skepticism (PradyuPrasad).

## tk

- Chinese-language coverage; r/LocalLLaMA (Arctic Shift has GLM-5.3 threads, e.g. post 1vny9zs and 1w0tgzl saved by the sweep but not triaged); Zhipu response to Anthropic; date of the cvd.z.ai migration notice; Z.ai's Windows/MSRC post; transcription of image-tweets (voooooogel 2105456299509170544, 7384254b 2110384454518837523, gnostic_snakes 2104154935629606971).