AI & agents
XBOW's AI agents helped build a Chrome full-chain exploit in six days
- Published
- Source
- XBOW Blog
Summary
Security firm XBOW said it earned Google's $250,000 top Chrome bounty for a full-chain exploit built in six days by four researchers working with AI agents running OpenAI's publicly available GPT-5.6 Sol. The agents searched source code and drafted proofs of concept while humans set strategy and verified results. The chain was built in August and disclosed in detail on October 13; the company says compute cost about $40,000, and all three bugs are now fixed.
Why it matters for our work
High-skill security research that once took months can compress into days when human judgment is paired with agent speed. As the cost of finding serious vulnerabilities falls for attackers and defenders alike, software teams have a stronger case for testing their own code first.
Translated from the Korean original. Summaries may be translated and edited. Commentary reflects our perspective; forecasts remain the source’s views.