search
Xbow
Trends
- 1AI Agent Xbow Earns $250K Chrome Bug Bounty●Security researchers spent 6 days doing their Chromework, built 1B user exploit Xbow earned a $250K bug bounty and all t
Security researchers report that Xbow, an AI-driven hacking system, found an exploit affecting roughly a billion Chrome users in just six days of work, earning a $250,000 bug bounty. Commenters joke that the AI itself only got a t-shirt, while humans took the payout, highlighting how quickly automated systems are now matching elite human vulnerability research.
- 2XBOW Details Six-Day Chrome Browser Exploit Chain●Zero to Calc in Six Days: Inside XBOW's Chrome Full Chain
Security research firm XBOW has published a write-up describing a full exploit chain against Google Chrome, from an initial bug to code execution, developed in six days. The research walks through how the company chained vulnerabilities to reach calculator-level execution on the browser. The post is being discussed by the security community, where such detailed full-chain write-ups are rare.
- 3AI-built exploit chain hit Chrome with three unknown bugs●🤖 XBOW chained three then-unknown Chrome bugs into a full-chain exploit (web page → RCE on Windows, no click needed), bu
XBOW, an AI-driven security system, chained three previously unknown Chrome vulnerabilities into a full exploit that could achieve remote code execution on Windows from a web page without user interaction. The bugs were found and weaponised in six days using AI agents. Google confirmed and patched all three in Chrome 152.0.7977.82 and paid a $250,000 top-tier bounty. Security researchers are debating what the speed of AI-built exploit chains means for browser defences.
- 4XBow benchmarks top AI models on offensive cybersecurity skills▼Between January and July 2026, the team at @ xbow evaluated top AI models—including GPT-5.5, Mythos Preview, Opus 4.7, G
The XBow team ran a months-long evaluation, from January through July 2026, testing leading AI models including GPT-5.5, Mythos Preview, Opus 4.7, GLM-5.2 and Grok 4.5 on offensive cybersecurity tasks. Their report, shared ahead of DEF CON's Application Security Village, lays out comparative findings on how well current frontier models perform real-world attack and exploitation work, drawing attention from security researchers.