Xbow built Chrome exploit chain with AI assistance in six days
Xbow’s six-day effort shows how its researchers used an AI model to help build a full Chrome exploit chain that it estimates could affect about one billion users worldwide.
• Xbow used GPT-5.6 Sol to help build a three-flaw Chrome exploit chain capable of escaping the browser sandbox on Windows.
• Google patched all three flaws and paid Xbow a $250,000 bounty.
• The team spent six days and about $40,000 in token charges; Xbow estimates about one billion users worldwide could have been affected.
Read more

October 15, 2026 21