{
 "type": "bundle",
 "id": "bundle--5fb89221-1fc4-525d-af40-f2d94fcc42b5",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--d570741d-8988-50bd-8578-54a559e03025",
   "created": "2026-08-07T00:00:00.000Z",
   "modified": "2026-08-07T00:00:00.000Z",
   "name": "Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days",
   "description": "Security firm XBOW chained three then-unknown Google Chrome bugs into an attack that runs code on a Windows computer when a user loads a web page. Its researchers built the chain in six days by directing AI agents running OpenAI's GPT-5.6 Sol. The agents searched Chrome's source code, tested ideas, built proofs of concept and wrote first drafts of the exploit, while the researchers chose targets, supplied context, challenged results and decided which pieces to join. Google confirmed and fixed all three bugs and paid XBOW its top $250,000 reward.",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-028",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-028/"
    },
    {
     "source_name": "The Hacker News",
     "url": "https://thehackernews.com/2026/10/researchers-used-public-openai-model-to.html",
     "description": "Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--8276a515-c6e6-51e5-9a86-1d85eec6a945",
   "created": "2026-08-07T00:00:00.000Z",
   "modified": "2026-08-07T00:00:00.000Z",
   "name": "XBOW researchers directing AI agents running OpenAI's GPT-5.6 Sol (a disclosed security research effort)",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--5e469ded-6a76-599d-8e1e-8d45aa7ee905",
   "created": "2026-08-07T00:00:00.000Z",
   "modified": "2026-08-07T00:00:00.000Z",
   "name": "Google Chrome (Chrome Vulnerability Reward Program), with Chrome users on Windows as the potentially exposed population",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--f872c749-f8b6-57c5-90e2-5fc9d0c6afc5",
   "created": "2026-08-07T00:00:00.000Z",
   "modified": "2026-08-07T00:00:00.000Z",
   "name": "TA0001 Initial Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0001"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--b184d4cd-c57c-58cd-919c-7455d5744845",
   "created": "2026-08-07T00:00:00.000Z",
   "modified": "2026-08-07T00:00:00.000Z",
   "name": "TA0002 Execution",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0002"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--d7446e91-4ff0-56f5-bf04-560107507ee5",
   "created": "2026-08-07T00:00:00.000Z",
   "modified": "2026-08-07T00:00:00.000Z",
   "name": "TA0004 Privilege Escalation",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0004"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--f544f0bd-219c-5cfd-95dc-c0858104dc25",
   "created": "2026-08-07T00:00:00.000Z",
   "modified": "2026-08-07T00:00:00.000Z",
   "name": "TA0042 Resource Development",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0042"
    }
   ]
  }
 ]
}