Epoch AI finds open-weight GLM 5.3 built file-stealing exploits for six Firefox releases using unshipped patches

In Epoch's setup, without internet access, each attack cost about $1,000 and also used an unpublished bug that Mozilla fixed in Firefox 159.0 on 27 October; Epoch has not confirmed whether it still works on 159.0, and similar attempts on Chrome have not succeeded.