Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- XBOW researchers chained three then-unknown Google Chrome vulnerabilities into a single full-chain attack that executes code on a Windows computer when a user merely loads a web page, completing the work in six days.
- The team built the exploit by directing AI agents running OpenAI's publicly available GPT-5.6, with the $250,000 price tag reflecting the severity of a full-chain browser compromise that the company itself disclosed.
Why it matters: XBOW assembled a full-chain Chrome exploit in six days using OpenAI's publicly available GPT-5.6, earning a $250,000 payout. The compressed timeline demonstrates that a publicly accessible AI model can now drive multi-stage browser attacks from discovery to weaponized code, shrinking the window defenders have to patch.
Ask SkimNews
