Free AI from Z.ai can hack unpatched Firefox for about $1,000
Why it matters
Attackers can now turn a published fix into a break-in for about $1,000, so any delay in installing browser updates is a real exposure.
Ask your team
How quickly do browsers and other software on our company devices get updated after a security fix is published?
What happened
Epoch AI reports that Z.ai's openly available GLM 5.3 turned published-but-undelivered Firefox security fixes into a working attack that stole a file from a visitor's computer with no clicks. Each Firefox build from mid-September to late October fell to it, at roughly $1,000 per build; Mozilla's 159.0 update on October 27 closes one flaw the attack relied on.
Tap an underlined word to see what it means.
Impact on Cybersecurity · Software & SaaS
The context No earlier Seventy story on this in the last 30 days.
Read the original at Epoch AI
Something wrong in this story? Report a mistake. We check it against the source within 24 hours.
Share with your take
Start from our line and make it yours. It stays on your device until you post it.
Ask about this story
Answered only from this story, with the line it came from.