{
  "id": 14465954,
  "title": "Artificial intelligence created an attack for Chrome in six days",
  "url": "https://urgent.news/2026/10/14/artificial-intelligence-created-an-attack-for-chrome-in-six-days",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-14T14:11:31.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/hacksgr/artificial-intelligence-created-an-attack-for-chrome-in-six-days-2omf"
  },
  "original_language": "en",
  "account": "Researchers at security firm XBOW utilized an artificial intelligence (AI) model to develop a comprehensive Google Chrome exploit within six days, by combining three previously unknown vulnerabilities. The AI model managed tasks such as source code analysis, proof-of-concept testing, and the initial creation of the exploit. Upon discovery, Google acknowledged the vulnerabilities and promptly released patches, while XBOW awarded itself the maximum $250,000 reward for successfully exploiting the entire attack chain.\n\nThe attack, completed between August 2 and 7, 2026, requires no user interaction beyond visiting a compromised webpage, thus facilitating code execution on Windows systems without any prior clicks or downloads. Crucially, Google confirmed that the exploit had not been previously deployed on actual users prior to its resolution.\n\nThe AI-assisted methodology involved a six-day period of preparation and testing, costing approximately $40,000. XBOW's researchers directed the AI in searching the browser code, evaluating ideas, crafting prototypes, and drafting the exploit's initial segments. The AI focused on three distinct Chrome components: an execution engine, image reading system, and error handling mechanism. The vulnerabilities impacted a billion Windows users before Google patched versions 152.0.7977.65 (on August 25), 152.0.7977.82 (on September 3), and the broader 152 update series.",
  "summary": "Researchers at security firm XBOW used an AI model to build a full-chain Google Chrome exploit combining three unknown bugs in six days. The agentic workflow handled source code analysis, proof-of-concept testing, and initial drafts. Google confirmed the vulnerabilities, released patches, and paid a $250,000 reward. Security firm XBOW announced that its researchers used a publicly available…",
  "key_points": [
    "Researchers at XBOW created Chrome exploit in six days using AI",
    "AI performed source code analysis, testing, and initial exploit creation",
    "Exploit affects Windows users, no user interaction needed"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}