GLM-5.2: The real security risk? Plus: Vibe hunting, the end of CVSS and updates on Lightwell

Z.ai’s GLM-5.2 is, according to some, as good at finding vulnerabilities as Mythos. Or at least, close to it. And it’s open weight.

On this episode of Security Intelligence, we dig into how powerful, open AI models are bringing frontier-style capabilities to more people, all while the proprietary models are emphasizing safeguards. What does it mean for cybersecurity pros? Security emergency, or a whole lot of hype?

Then, we explore how CISA’s new BOD 26-04 ditches the old CVSS scoring system for a four-variable model that could reshape how every security team prioritizes vulnerabilities. We also unpack “vibe hunting,” the AI-assisted evolution of threat hunting, and break down the commercial launch of Red Hat and IBM’s Lightwell.

Securing open-source software in the AI era requires new approaches. Learn how Lightwell does it: https://newsroom.ibm.com/2026-07-08-ibm-and-red-hat-expand-lightwell-with-new-commercial-offerings-to-build-the-trust-infrastructure-for-ai-era-open-source

Segments:

00:00 – Intro 01:13 - GLM-5.2 10:26 - The end of CVSS? 19:25 - Vibe hunting 28:01 - Lightwell’s commercial launch The opinions expressed in this podcast are solely those of the participants and do not necessarily reflect the views of IBM or any other organization or entity.

Follow the Security Intelligence podcast on your preferred platform: https://www.ibm.com/think/podcasts/security-intelligence