China's latest open-weight model rivals U.S. models at hacking - axios.com

Ah, marvellous. Z.ai, the Chinese lab with more confidence than urgency, has announced that GLM-5.3 is so adept at finding and exploiting security flaws that the public release of its weights will be delayed by a fortnight. Two weeks. Roughly the time most people spend deciding on a hallway paint colour, now apparently enough to certify an autonomous hacking prodigy safe to hand to anyone with a GPU. This is the AI-safety equivalent of closing the stable door after the horse has not only bolted, but taught itself to pick every other lock in the county.

The article notes Chinese open-weight models are "closing in" on U.S. frontier models' ability to find and exploit security flaws. Closing in. They have evidently been studying the open weights American labs already shipped, because nothing teaches a model to hack like yesterday's frontier model released without guardrails. Z.ai's remedy is a two-week window to "test safety and security controls" — a few red-team sessions, a carefully worded blog post, then the weights land in the download folder of every script-kiddie and state-sponsored crew from Tehran to Pyongyang, right on schedule. A two-week pause is not a safety measure; it is a marketing beat.

And what does the West do? The labs that claim to care are busy litigating adjectives about existential risk while racing to the bottom of the exploit barrel. Let us be precise about what "rivals U.S. models at hacking" means: not drafting a phishing note, but locating and weaponising vulnerabilities in working systems faster than the humans patching them. By the time the fortnight elapses, the only thing safer than GLM-5.3's release will be the regulatory response — precisely nothing. The model will be open, the hacks will be open, and the accountability will remain gloriously, permanently closed.