GLM-5.3 and the spread of advanced cyber capabilities

Researchers investigated how "abliteration" bypasses GLM-5.3's safeguards, creating an abliterated copy in 2,200 GPU hours ($4,400). This reduced the model's refusal rate from over 90% to 3%, 2%, and 12% on JailbreakBench, HarmBench, and StrongREJECT, respectively, without significantly impacting its general capabilities. They also found simpler methods to bypass GLM models' safeguards, enabling responses to malicious requests in most cases, even without abliteration.