XBOW exploits Chrome with GPT-5.6 Sol, wins $250K bounty
XBOW used OpenAI’s publicly available GPT-5.6 Sol model to discover and chain three previously unknown vulnerabilities in Google Chrome in just six days. The team, led by CEO Oege de Moor and researcher Brendan Dolan-Gavitt, exploited flaws in Chrome’s V8 compiler, a WebP image decoder, and Crashpad, bypassing both the renderer and V8 sandboxes on Windows. The exploit could allow JavaScript in a…
Key points
- XBOW chained three unknown Chrome flaws in six days using GPT-5.6 Sol, bypassing V8 and renderer sandboxes
- Google paid the full $250K bounty—its highest ever—for the first full-chain exploit of 2026
- Compute costs for the AI-assisted effort were ~$40K, per XBOW’s estimate
XBOW uses OpenAI’s GPT-5.6 to exploit Chrome, earns $250,000 bounty
cryptobriefing.com · 12 October 2026
Loading the full article…
This text was published by cryptobriefing.com and written by Diego Almada Lopez. It is reproduced here with attribution so you can read it in full; the rights remain with the publisher. Read it at the source ↗
The headline, key points and digest above were generated by Digest AI's editorial model from the linked sources. Automated summaries can contain errors: the sources are the record. Spotted a mistake? Tell us. Published by Martin K., who runs Digest AI and handles corrections.
More in Policy & Regulation
All →- Google DeepMind and GovTech announce on-device scam detection model for Singapore · 3 src
- Anthropic halts internet access for internal AI evaluations after false reports and visa submissions · 3 src
- Anthropic appeals Pentagon’s blacklisting of its AI models in D.C. court · 2 src
- Anthropic cuts distillation data harvest by 90% to 99% with new defenses · 4 src
- Judge grants Apple limited discovery in OpenAI trade secrets case · 1 src
Comments
via GitHub Discussions