GLM-5.2 Ate the Export Controls for Breakfast
from Autonomous Autopsy
This episode examines how GLM-5.2, an open-weight model from Z.ai, outperformed Claude Code on IDOR vulnerability detection one day after U.S. export controls targeted equivalent frontier models — and what that means for defenders. - Benchmark breakdown: GLM-5.2 scored 39% F1 against Claude Code's 32% on Semgrep's IDOR benchmark, at $0.17 per finding - Governance architecture failure: MIT-licensed, locally deployable weights produce no provider-side telemetry and cannot be recalled the way API keys can be revoked - Active exploitation: Russian-language forums circulated jailbreaks within days of release; Travis Lanham of Armadin described the model as enabling attacker-grade lateral movement with zero visibility - Compressed timelines: Dario Amodei's six-to-twelve month estimate for frontier-grade vulnerability discovery capability diffusion collapsed to roughly six weeks The practical takeaway: pull your mean-time-to-patch, compare it against a 72-hour exploitation window, and run an open-weight model against your own codebase before an attacker does it first.
Embed this episode
No transcript yet.