🚨Researchers Earn $250K for GPT-5.6 Sol Chrome Exploit
AI-powered exploit nets $250K bug bounty
TL;DR
Security researchers earned $250,000 for chaining three zero-day Chrome vulnerabilities using OpenAI's GPT-5.6 Sol, affecting one billion users. The exploit highlights the growing threat of AI in cybersecurity.
Security researchers earned a $250,000 bug bounty from Google for chaining three zero-day vulnerabilities in Chrome into a single exploit using OpenAI's GPT-5.6 Sol AI model. This highlights the increasing role of AI in discovering and exploiting vulnerabilities, affecting one billion Chrome users worldwide. The researchers spent 6 days and $40,000 in token costs to discover and build the attack chain, which crossed two security boundaries in three stages. Google patched all three vulnerabilities in Chrome version 152.0.7977.82 or later, but users must relaunch the browser to apply the fix. This work underscores the importance of defending against AI-powered attacks in cybersecurity.
Key Points
Researchers earned $250,000 for chaining three Chrome zero-day vulnerabilities using GPT-5.6 Sol AI model.
The exploit affected about one billion Chrome users worldwide, highlighting the scale of the threat.
Researchers spent 6 days and $40,000 in token costs to discover and build the attack chain.
The attack chain crossed two security boundaries in three stages, including a V8 compiler bug, an animated-WebP decoder bug, and a memory-safety bug in Crashpad.
Google patched all three vulnerabilities in Chrome version 152.0.7977.82 or later, but users must relaunch the browser to apply the fix.
Why It Matters
If you're using Chrome, the recent $250K bug bounty highlights the growing threat of AI in cybersecurity. Researchers used GPT-5.6 Sol to chain three zero-day vulnerabilities, affecting one billion users. This underscores the need for robust defenses against AI-powered attacks.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,569 builders reading daily.