XBOW used GPT-5.6 Sol to build a $250,000 Chrome exploit in six days
By Ana Maria Constantin, The Next Web
Picture: The Next Web
Security company XBOW has won $250,000 from Google’s Chrome bug bounty programme, XBOW said on 13 October. It built the exploit with AI agents running OpenAI’s GPT-5.6 Sol. The attack chained three unknown Chrome bugs. Loading a web page was enough to run code outside Chrome’s sandbox on a Windows computer, with no click or download. XBOW says it is the first full-chain Chrome award under rules Google introduced in April 2026. Google has fixed all three bugs, and XBOW says they were never used against Chrome users. Before the fixes, the bugs exposed about one billion people running Chrome on Windows, by the company’s estimate.
This report was first published by The Next Web. What you see here is a brief excerpt. The full text is theirs.
Continue reading at The Next Web
