Chinese AI startup Z.ai has launched GLM-5.3, a new language model with significant advancements in long-horizon coding and cybersecurity. This release builds upon the base model of its predecessor, GLM-5.2, achieving improvements through extensive post-training scaling across diverse tasks and environments. Notably, GLM-5.3 has demonstrated a concerning leap in cybersecurity capabilities, even reportedly identifying a vulnerability in Cursor, an AI coding startup acquired by SpaceX. Z.ai is implementing controls for sensitive functionalities, including a "trusted access" approach.The model's enhanced coding prowess is evident in its performance gains on benchmarks like Terminal-Bench and DeepSWE. Z.ai emphasizes efficiency, showcasing reduced token consumption for improved task completion in its private Code Bench evaluations. The cybersecurity improvements, however, surpassed Z.ai's expectations, with the model progressing beyond vulnerability identification to constructing exploitation chains. While GLM-5.3's performance on exploit development tasks is still behind some competitors, its rapid progress is a key development.GLM-5.3's release also introduces API changes, requiring developers to adapt their applications. The model's availability is initially limited to Z.ai's GLM Coding Plan and ZCode environment, with API access and open weights planned for later release after safety evaluations. Z.ai's rapid iteration, from GLM-4.5 to GLM-5.3, highlights a strategic focus on agentic engineering and long-running autonomous workloads. This latest release underscores the dual nature of advanced AI capabilities, where improved software engineering tools can also become potent security research instruments.