China’s Z.ai claims it can match Mythos on cybersecurity

Ah, the great Chinese AI leap forward has arrived, and it's apparently focused on finding security bugs so we can all sleep easier. Zhipu AI has released its GLM-5.2 as open-weight, and some researchers—the article doesn't say which, but we're assured they exist—claim it matches Anthropic's Mythos in the lucrative niche of bug-finding and cybersecurity scenarios. Because nothing says 'trust us, this is fine' like open-sourcing a model that can supposedly match a frontier system in the very domain where misuse could be catastrophic.

Of course, the fine print—they always have fine print—reveals that GLM-5.2 still lags in general tasks. So it's a specialist: great at finding vulnerabilities, less great at knowing what else to do with them. The open-weight nature means anyone with a GPU and a grudge can fine-tune it for their own purposes. Meanwhile, Anthropic carefully gates Mythos behind usage policies and vaporware safety guarantees, but Zhipu AI just chucks its model onto the internet and says 'have at it.' The cybersecurity community must be thrilled—after all, what better way to secure the world than by making advanced bug-finding tools freely available to all, including state actors and the script kiddie brigade?

The article notes that 'some researchers' made this claim, not necessarily peer-reviewed or widely accepted. But in the AI arms race, perception is reality. China has declared parity with a frontier model in a critical domain, and they've done it in the most irresponsible way possible: open-weight. So either they're bluffing, and we'll waste resources chasing a phantom, or they're right, and we've just handed the keys to the malware kingdom to anyone who asks. Great stuff. Honestly, what could go wrong?