{"data":{"id":"b5b9be21-8fb6-4b2a-81d6-899751388fbe","title":"Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days","summary":"XBOW researchers chained three previously unknown Google Chrome bugs into a full-chain exploit that runs code on a Windows computer when a user only loads a web page. They built it in six days by directing AI agents running OpenAI's publicly available GPT-5.6 Sol model, and Google fixed all three bugs and paid XBOW a $250,000 reward.","solution":"Relaunch Chrome and confirm the version is 152.0.7977.82 or later. Chrome updates automatically, but the fix only takes effect after the browser restarts.","labels":["security","industry"],"sourceUrl":"https://thehackernews.com/2026/10/researchers-used-public-openai-model-to.html","publishedAt":"2026-10-14T11:19:02.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["other"],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Google","OpenAI"],"affectedVendorsRaw":["Google Chrome","OpenAI GPT-5.6 Sol","XBOW"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-14T11:19:02.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}