This paper is weird and seems like a research conflict of interest with a direct competitor?

Given this evidence, we think it’s likely both state and non-state actors will use models like GLM-5.3 to cause real-world harm.

I’ve used GLM-5.3 fairly extensively (not for cyber). I’m inclined to take this with a grain of salt given its overall capability. Not saying anything is false, but maybe cherry picked or reverse benchmaxxing. Either that or it’s an idiot savant that’s great at cyber and mid at the rest which I don’t think happens.