
What happened
Anthropic released a report arguing that GLM-5.3, released in August by the Chinese company Z.ai, poses a major cyberattack risk because it is freely available for anyone to download and modify.
Why it matters
An open model has no filter checking whether a user's prompts are safe and no way to revoke access, so the report's warning lands hardest on safety teams at frontier labs and the policymakers weighing limits on open releases.
Summaries like this, in your inbox every morning.
The report lands in the middle of a fight that has been public for some time. Nvidia CEO Jensen Huang, who gains if people keep buying hardware to run open models, pushes for the United States to develop more of them, while Anthropic's Dario Amodei, whose closed-model business could be undermined by cheap and powerful alternatives, takes a more cautious stance. Those commercial incentives sit on top of a real disagreement that experts describe as downstream of how you view AI itself.
Today closed models lead — as of publication the top eight models on the Artificial Analysis LLM leaderboard are all closed — but open models are only a handful of months behind. The defensive tools that apply to a closed model, filters and account shutdowns, do not travel with a downloaded model, which is why the debate has moved away from an all-or-nothing framing toward techniques meant to reduce the risk. Those include training models on data stripped of bad behavior and building models resistant to retraining, though a recent preprint found no current tamper-resistant approach survives every attack.
The benefits are not as clean as they first appear either. Open weights are described as a bare minimum rather than full openness, and without affordable chips the weights cannot be run at all. Several experts point to staged release, where a model starts closed and opens up as its safety is assured, as a way to hold the trade-off between safety and deconcentration of power.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
Satya Nadella spent a weekend post saying AI systems need emergency off switches — authorized humans who can s…

Anthropic researchers William Zhou and Daniel Freeman tested four small models on 15 Android TV boxes costing…

On October 13, Ricoh Japan began offering a Dify Hosting Environment Operation Service for customers using the…

Causa Prima announced a $20 million seed round led by Base10 Partners to expand its agent-to-agent platform fo…

The explainer states that an LLM predicts one next token at a time, and that instead of recomputing past token…

The practitioner, writing on Zenn, set an "incident response mode" that reorders the AI agent's investigation…
