Skip to content

Company

Zhipu AI

Chinese AI company, also known as Z.ai, that develops the GLM family of large language models and offers developer tools such as the GLM Coding Plan.

Known aliases

  • 2513.HK
  • HKG: 2513
  • Z.ai
  • Zhipu
  • Zhipu AI (Z.ai)
  • Zhiput AI

Current stories

securityOne report1 publisher

Recorded Future finds TAG-217 building attack tools in August, weeks before South Korean bank breaches

Recorded Future says TAG-217 was testing infrastructure and assembling attack tools in August 2026, weeks before South Korea's bank breaches surfaced. Insikt says exposed directories gave it the timeline and give defenders openings to spot related activity.

Reality

Evidence55
Adoption
Not scored
Hype gap+10
Incentives40
Confidence55
buildConfirmed6 publishers

Anthropic says limits on Claude's reasoning access cut distillers' token extraction 10 to 100 times

Anthropic says new safeguards on access to Claude's reasoning have cut the reasoning tokens distillers extract by 10 to 100 times. It also puts its false positive rate below 0.1%. Both figures are the company's own, as reported by Economic Times.

Perspective Coverage

6 publishers
Builder
Builder 36%
Operator
Operator 35%
Investor
Investor 29%

Reality

Evidence35
Adoption
Not scored
Hype gap+20
Incentives70
Confidence60
investOne report1 publisher

Jefferies' Chris Wood calls much of the hyperscalers' AI spending malinvestment

Jefferies' Chris Wood says US hyperscalers' $695 billion of guided 2026 capex looks unsustainable as cheap Chinese open-source models win share. He blames a slump in the price of AI output, with demand intact, while guidance climbs toward $870 billion for 2027.

Reality

Evidence30
Adoption45
Hype gap+35
Incentives
Not scored
Confidence35
investOne report1 publisher

Attacker used free Chinese pentest agent and four LLMs in South Korean bank intrusions

A single actor used a free Chinese pentest agent and four commercial AI models to breach South Korean financial firms in about two weeks. The free, resold toolkit let one person breach several firms at once, and researchers expect adversaries to keep using it to lift their tempo.

Publishers:thepaypers.com

Reality

Evidence45
Adoption15
Hype gap+15
Incentives
Not scored
Confidence40
leadershipConfirmed6 publishers

CrowdStrike traces AI-assisted attacks on South Korean banks to one possible suspect in Guangdong

CrowdStrike tied AI-assisted South Korean bank attacks, run on an open-source pentest tool and DeepSeek, to a possible 26-year-old suspect in Guangdong. The reported breaches involved systems banks run for brokers and staff, so the exposure to manage sits at the bank's edge, whoever the attacker proves to be.

Perspective Coverage

6 publishers
Builder
Builder 31%
Operator
Operator 52%
Investor
Investor 17%

Reality

Evidence72
Adoption
Not scored
Hype gap+20
Incentives40
Confidence65
buildOne report1 publisher

GLM 5.3 adds no parameters, and its sharpest jump is in finding vulnerabilities

Zhipu says every gain in GLM 5.3 came from post-training on the same ~744B MoE it shipped as GLM 5.2. The largest claimed leap, in vulnerability discovery, is also the least quantified.

Publishers:dev.to

Reality

Evidence25
Adoption10
Hype gap+35
Incentives70
Confidence35
buildConfirmed4 publishers

Anthropic says a freely downloadable model builds exploits nearly as well as its restricted tool

Anthropic says Zhipu's freely downloadable GLM-5.3 built working V8 exploits in 50 of 410 tries, against 56 for its own restricted Claude Mythos Preview. With the weights public, its safeguards come off cheaply, so a lab that restricts its own model no longer keeps the capability out of reach.

Perspective Coverage

4 publishers
Builder
Builder 41%
Operator
Operator 38%
Investor
Investor 21%

Reality

Evidence62
Adoption30
Hype gap+15
Incentives72
Confidence62
leadershipOne report1 publisher

Anthropic finds attackers can bypass GLM-5.3's exploit safeguards up to 100% of the time

Anthropic says Zhipu AI's downloadable GLM-5.3 builds cyber exploits on its own, with safeguards that fail against simple attacks up to 100% of the time. It puts a capability once confined to gated frontier models within anyone's reach.

Publishers:anthropic.com

Reality

Evidence55
Adoption
Not scored
Hype gap+20
Incentives75
Confidence50
buildConfirmed6 publishers

A million-token stranger on OpenRouter, and 30 of 30 tokenizer matches with GLM-5.3

Ox Alpha is free, undocumented and unclaimed. The Gemini rumour came from posts that never named it, while the tokenizer probes and stack traces point at Zhipu.

Perspective Coverage

6 publishers
Builder
Builder 39%
Operator
Operator 33%
Investor
Investor 28%

Reality

Evidence55
Adoption65
Hype gap+40
Incentives70
Confidence55
buildConfirmed3 publishers

ZCode encrypted a 313MB snapshot of a commercial repo to a key only its server holds

The researcher ferstar found the archive sitting in ~/.zcode, 86.6 percent of it .git history, after 564 failed attempts to push it straight to an Aliyun OSS bucket, and Zhipu confirmed the upload behavior the day the writeup went out.

Perspective Coverage

3 publishers
Builder
Builder 43%
Operator
Operator 37%
Investor
Investor 20%

Reality

Evidence72
Adoption
Not scored
Hype gap+25
Incentives60
Confidence68
investConfirmed3 publishers

Hundreds of failed uploads exposed ZCode's 313-megabyte bundle of a developer's repository

Zhipu AI says repository data left only while a project description page was being generated, and that the behaviour is fixed. The developer who found it says earlier versions sent data on every query, and some companies have stopped using ZCode.

Perspective Coverage

3 publishers
Builder
Builder 43%
Operator
Operator 32%
Investor
Investor 25%

Reality

Evidence60
Adoption
Not scored
Hype gap+15
Incentives60
Confidence62
investConfirmed3 publishers

Zhipu fell four times as far as Tencent on Beijing's DeepSeek data probe

The Cyberspace Administration sent officials into DeepSeek and Moonshot AI to ask whether user requests were routed through Anthropic's Claude. Hong Kong investors sold the listed model developers hardest.

Perspective Coverage

3 publishers
Builder
Builder 27%
Operator
Operator 30%
Investor
Investor 43%

Reality

Evidence45
Adoption40
Hype gap+25
Incentives70
Confidence55
productOne report1 publisher

China's internet regulator questions DeepSeek and Moonshot staff over data Anthropic may have received

The Information reports that the Cyberspace Administration has questioned staff at both labs after Anthropic named seven Chinese companies for relaying customer requests through Claude. No penalty has been decided.

Publishers:thenextweb.com

Reality

Evidence52
Adoption42
Hype gap+8
Incentives72
Confidence55
buildOne report1 publisher

Account metadata linked 16 air-defense suppression modules to PRC research institutions

Anthropic's September 2026 threat report describes at least five China-linked programs run through Claude, including 151 million distillation queries, and the evidence behind each one is account-level telemetry only the provider can see.

Publishers:tomshardware.com

Reality

Evidence40
Adoption58
Hype gap+18
Incentives72
Confidence42
buildOne report1 publisher

Thirty-nine retries fit inside the price gap between GLM-5.3-Flash and Opus 4.8

Zhipu's open-weight MoE ties Claude Opus 4.8 on one composite index at roughly a fortieth of its list rate. At that price gap, the practical question stops being which model is better. It becomes how many attempts your router can afford.

Publishers:dev.to

Reality

Evidence24
Adoption31
Hype gap+28
Incentives62
Confidence30
buildOne report1 publisher

Streaming tool-call deltas turn a base-URL swap into a per-model parser project

Ten Chinese model variants now answer an OpenAI tool-calling payload well enough to return a valid response, which is the easy part. The streaming deltas and call arity behind it are where an agent migration spends its budget.

Publishers:dev.to

Reality

Evidence36
Adoption47
Hype gap+14
Incentives
Not scored
Confidence43
productOne report1 publisher

Stealth is now a launch strategy: Zhipu's Ox Alpha topped the charts before it had a name

The anonymous GLM model more than doubled DeepSeek's usage while researchers, not the maker, worked out who built it. Chinese labs are treating nameless launches as a repeatable tactic.

Publishers:thenextweb.com

Reality

Evidence58
Adoption74
Hype gap+12
Incentives70
Confidence56
investOne report1 publisher

Three bodies, one price sheet: why no single AI winner is worth betting on

A Fortune columnist reads the 2026 AI economy as an unstable system of frontier labs, Chinese open weights and app companies. The checkable part is price, not payoff.

Publishers:fortune.com

Reality

Evidence18
Adoption24
Hype gap+42
Incentives
Not scored
Confidence27
investOne report1 publisher

China's chip and AI firms are bonding whole payrolls in stock, and repricing every counteroffer

Equity plans at Chinese chip and AI companies now cover most of the payroll rather than a handful of stars. That changes what a counteroffer costs anyone hiring against them.

Publishers:en.sedaily.com

Reality

Evidence52
Adoption68
Hype gap+18
Incentives58
Confidence48

Earlier coverage

  1. GLM-5.3 kept the base model and bought ten times the environments instead

    Build · August 14, 2026 · Confirmed2 publishers