Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #7

AI-built exploit chain hit Chrome with three unknown bugs

Original: 🤖 XBOW chained three then-unknown Chrome bugs into a full-chain exploit (web page → RCE on Windows, no click needed), bu

XBOW, an AI-driven security system, chained three previously unknown Chrome vulnerabilities into a full exploit that could achieve remote code execution on Windows from a web page without user interaction. The bugs were found and weaponised in six days using AI agents. Google confirmed and patched all three in Chrome 152.0.7977.82 and paid a $250,000 top-tier bounty. Security researchers are debating what the speed of AI-built exploit chains means for browser defences.

Why now: The speed and autonomy of AI in finding and chaining zero-day browser bugs marks a significant shift in offensive cybersecurity capability.

XBOWGoogle ChromeGoogleMicrosoft Windows

Open on mastodon →

Evidence

• 🤖 XBOW chained three then-unknown Chrome bugs into a full-chain exploit (web page → RCE on Windows, no click needed), built in 6 days by directing AI agents on GPT-5.6 Sol. Google confirmed and fixed all three, paid the top $250k bounty. Fixed in Chrome 152.0.7977.82 — relaunch… · cloud@infosec.exchange · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/2255097