{"data":{"id":"860e654b-38a2-4984-b88a-22367db382c5","title":"Xbow spent $40K on AI and cracked Google Chrome wide open","summary":"Researchers at Xbow USA used OpenAI's GPT-5.6 Sol over six days to chain Chrome vulnerabilities, escaping the V8 JavaScript engine sandbox and then Chrome's operating-system process sandbox to launch a Windows app from a malicious web page. The work cost about $40,000 in AI compute and earned a $250,000 bug bounty from Google under the new 2026 rules. Google fixed the flaws after Xbow reported them.","solution":"Google fixed the flaws after Xbow presented its findings to the company.","labels":["security","industry"],"sourceUrl":"https://www.csoonline.com/article/4236599/xbow-spent-40k-on-ai-and-cracked-google-chrome-wide-open-2.html","publishedAt":"2026-10-16T15:17:37.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Google","OpenAI"],"affectedVendorsRaw":["Google Chrome","OpenAI GPT-5.6 Sol","Xbow"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-16T15:17:37.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}