XBOW wins $250,000 from Google for Chrome exploit built with AI agents
XBOW researchers built the exploit in six days using AI agents running OpenAI’s publicly available GPT-5.6 Sol model. According to The Hacker News, it combined three previously unknown bugs to run code on a Windows computer when someone loaded a web page. Google has since fixed the flaws.
- Computing costs totaled about $40,000, according to Cyber Security News.
Covered by 2 publishers within 2 hours of the first report.
Reporting2
Cyber Security News Google Awarded $250,000 Bounty for a Full-chain Chrome Exploit Found Using GPT-5.6 · Guru Baran
The Hacker News Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days · info@thehackernews.com (The Hacker News)