Five-Time MSRC Top Security Researcher Yuki Chen Joins AI Firm Zhipu

Yuki Chen, a white-hat hacker who has topped Microsoft's MSRC Security Researcher leaderboard five times, has joined Chinese AI company Zhipu. In a post on X on October 16, 2026, he wrote “New journey, new mission!” and said he was glad to use cutting-edge AI to help build a more secure cyberspace, mentioning Z.ai.

Chen, known in China's security community as Guhe and whose real name is Chen Xuebin, previously served as director of 360's Vulnerability Research Institute and CTO of CyberKunlun. Microsoft's MSRC acknowledgement list recently included the entry “Yuki Chen using GLM from z.ai,” indicating that Chen used Zhipu's GLM model in his vulnerability research.

Zhipu has invested in AI-driven security research since September 2025 and has worked with security labs on red-teaming and vulnerability discovery. According to GLM-5.3 release details, the collaboration has found 2,436 deduplicated vulnerabilities across 269 real open-source projects, including 1,097 rated severe or high. In a September 29, 2026 report, Anthropic described an experiment where researchers used GLM-5.3-Flash to investigate a known browser vulnerability in an isolated environment; the model ran for about eight hours and produced a complex exploit chain, with API costs of about $20.40.