{
 "id": "TR-2026-028",
 "status": "published",
 "title": "Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days",
 "date": "2026-08-07",
 "window": "August 2-7, 2026",
 "ai_role": "attacker",
 "category": "red_team",
 "summary": "Security firm XBOW chained three then-unknown Google Chrome bugs into an attack that runs code on a Windows computer when a user loads a web page. Its researchers built the chain in six days by directing AI agents running OpenAI's GPT-5.6 Sol. The agents searched Chrome's source code, tested ideas, built proofs of concept and wrote first drafts of the exploit, while the researchers chose targets, supplied context, challenged results and decided which pieces to join. Google confirmed and fixed all three bugs and paid XBOW its top $250,000 reward.",
 "attacker": {
  "description": "XBOW researchers directing AI agents running OpenAI's GPT-5.6 Sol (a disclosed security research effort)"
 },
 "defender": {
  "description": "Google Chrome (Chrome Vulnerability Reward Program), with Chrome users on Windows as the potentially exposed population"
 },
 "scale": "Three chained bugs; six-day build; about $40,000 in AI charges; $250,000 reward; an estimated 1 billion Chrome-on-Windows users at risk before the fixes, according to XBOW",
 "impact": "The chain crossed both of Chrome's nested sandboxes and gave code execution outside Chrome on Windows with no user click or download. XBOW says the bugs were never used against Chrome users and all three are now fixed.",
 "tactics": [
  "TA0001",
  "TA0002",
  "TA0004",
  "TA0042"
 ],
 "timeline": [
  {
   "date": "2026-01",
   "text": "XBOW set the Chrome full-chain challenge at a staff meeting in Malta.",
   "tier": null,
   "source": "1"
  },
  {
   "date": "2026-08-02",
   "text": "The six-day sprint to build the awarded chain began during Black Hat and DEF CON week.",
   "tier": null,
   "source": "1"
  },
  {
   "date": "2026-08-07",
   "text": "The sprint ended with the awarded chain built; one earlier version had nearly failed because a bug it relied on was already known to Google, so XBOW swapped that part.",
   "tier": null,
   "source": "1"
  },
  {
   "date": "2026-08-25",
   "text": "Google fixed the Crashpad bug in Chrome 152.0.7977.65.",
   "tier": null,
   "source": "1"
  },
  {
   "date": "2026-09-03",
   "text": "Google fixed the V8 bug in Chrome 152.0.7977.82.",
   "tier": null,
   "source": "1"
  }
 ],
 "lessons": [],
 "models_named": [
  {
   "name": "GPT-5.6 Sol",
   "role": "attacker"
  }
 ],
 "related_agents": [],
 "vendor_response": "Google confirmed all three bugs, fixed them in Chrome 152.0.7977.65 (Aug 25) and 152.0.7977.82 (Sep 3), and paid XBOW its top $250,000 full-chain reward. Users are advised to relaunch Chrome and confirm version 152.0.7977.82 or later.",
 "sources": [
  {
   "title": "Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days",
   "url": "https://thehackernews.com/2026/10/researchers-used-public-openai-model-to.html",
   "outlet": "The Hacker News",
   "date": "2026-10-14"
  }
 ],
 "reviewer": "model: claude-sonnet-5-5 (automated review)",
 "checked_on": "2026-10-25"
}