AIToday
Large Language ModelsAI Safety & AlignmentOpen-Source AIMIT Technology Review AIPublished: Oct 13, 2026, 22:00 JST

Anthropic flags GLM-5.3 as open-model debate heats up

Anthropic flags GLM-5.3 as open-model debate heats up

3 Key Points

  1. What happened

    Anthropic released a report arguing that GLM-5.3, released in August by the Chinese company Z.ai, poses a major cyberattack risk because it is freely available for anyone to download and modify.

  2. Why it matters

    An open model has no filter checking whether a user's prompts are safe and no way to revoke access, so the report's warning lands hardest on safety teams at frontier labs and the policymakers weighing limits on open releases.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

The report lands in the middle of a fight that has been public for some time. Nvidia CEO Jensen Huang, who gains if people keep buying hardware to run open models, pushes for the United States to develop more of them, while Anthropic's Dario Amodei, whose closed-model business could be undermined by cheap and powerful alternatives, takes a more cautious stance. Those commercial incentives sit on top of a real disagreement that experts describe as downstream of how you view AI itself.

Today closed models lead — as of publication the top eight models on the Artificial Analysis LLM leaderboard are all closed — but open models are only a handful of months behind. The defensive tools that apply to a closed model, filters and account shutdowns, do not travel with a downloaded model, which is why the debate has moved away from an all-or-nothing framing toward techniques meant to reduce the risk. Those include training models on data stripped of bad behavior and building models resistant to retraining, though a recent preprint found no current tamper-resistant approach survives every attack.

The benefits are not as clean as they first appear either. Open weights are described as a bare minimum rather than full openness, and without affordable chips the weights cannot be run at all. Several experts point to staged release, where a model starts closed and opens up as its safety is assured, as a way to hold the trade-off between safety and deconcentration of power.

FAQ
What is GLM-5.3 and who released it?
GLM-5.3 is a powerful open model released in August by the Chinese company Z.ai. It is freely available for anyone to download and modify.
Why are open models considered riskier than closed ones?
Closed models let companies filter prompts and revoke accounts, but when someone runs an open model on their own hardware there is no filter and no way to revoke access. Researchers have also shown it is surprisingly easy to retrain a safe open model to engage in the behaviors it was trained to avoid.
Are open models also safer in some ways?
Some experts argue, by analogy to open-source software like Linux, that communities of researchers can more easily probe open models for flaws. Open models can also be used more widely for cyber defense, as Hugging Face noted after it depended on an open model to analyze a hack.
MIT Technology Review AIRead Original Article

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleChristophe Henner warns Wikipedia lost 1.1 billion visits per month