ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More

A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to code execution. Elsewhere, exposed systems, old bugs, odd hiding tricks, and AI-assisted exploit research keep lowering the effort needed to cause damage. Nothing here needs

The article reports that GLM-5.3 is being used in AI-assisted exploit research, helping lower the effort required to discover and weaponize vulnerabilities. It also describes multiple software RCE issues and how legitimate components (like signed drivers and trusted apps) are turned against defenses. From a RealGround perspective, AI models like GLM-5.3 used to accelerate exploit development represent malicious AI use that can shorten attacker discovery and development cycles. Organizations should proactively red team AI-assisted attack scenarios and assess their readiness for AI-accelerated exploitation of existing software and supply-chain weaknesses.