SecurityOpenAIViral

XBOW and GPT-5.6 Sol built a Chrome full-chain exploit in six days for a $250,000 Google bounty

XBOW ·

XBOW Security Labs research banner reading 'XBOW Built a Chrome Full-Chain Exploit in Six Days' with a Chrome logo on a dark background

Offensive-security firm XBOW says researchers plus OpenAI's publicly available GPT-5.6 Sol chained three previously unknown Chrome bugs into a Windows full-chain exploit in six days, earning Google's first $250,000 Chrome full-chain award under 2026 VRP rules. Compute for the awarded chain cost about $40,000. Google fixed the bugs; XBOW says they were never used against users and urges people to relaunch Chrome so updates take effect.

Sources

← All AI news

Get the daily AI news

The day's important AI news by email: short, plain summaries, each linked to its source. Unsubscribe any time.

Prefer email? Write to [email protected] ([email protected]).