{"type":"post","id":"zero-to-calc-in-six-days-inside-xbow-791f94","slug":"zero-to-calc-in-six-days-inside-xbow-791f94","title":"Zero to Calc in Six Days: Inside XBOW's Chrome Full Chain","description":"XBOW’s technical account explains how four researchers and agents using OpenAI’s gpt-5.6-sol model assembled a Chrome exploit chain in six days, joining three vulnerabilities to escape two sandboxes.","retrieval_nugget":"XBOW’s technical account explains how four researchers and agents using OpenAI’s gpt-5.6-sol model assembled a Chrome exploit chain in six days, joining three vulnerabilities to escape two sandboxes. The account adds exploit mechanics and orchestration detail to a known story, while illustrating how human direction and parallel agent work can compress complex security research.","published_at":"2026-11-01","updated_at":"2026-11-01","record_date":"2026-11-01","date_kind":"published_at","topics":["google"],"entities":["XBOW","Chrome","V8","Crashpad","OpenAI","GPT-5.6 Sol","Brendan Dolan-Gavitt","Google"],"related_patterns":[],"novelty_label":"new_fact","what_changed":"XBOW’s technical account details the chain’s V8, animated-WebP and Crashpad bugs, exploit interfaces, parallel AI-agent workflow and roughly $40,000 in API charges.","prior_refs":["https://newruntime.com/posts/xbow-built-a-chrome-full-chain-exploit-affecting-097c4b/","https://newruntime.com/posts/an-off-the-shelf-openai-model-helped-hack-fa471e/"],"source_url":"https://xbow.com/labs/research/zero-to-calc-in-six-days-inside-xbow-chrome-full-chain","source_urls":["https://xbow.com/labs/research/zero-to-calc-in-six-days-inside-xbow-chrome-full-chain"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:zero-to-calc-in-six-days-inside-xbow-791f94","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/zero-to-calc-in-six-days-inside-xbow-791f94/","markdown":"https://newruntime.com/posts/zero-to-calc-in-six-days-inside-xbow-791f94.md","json":"https://newruntime.com/posts/zero-to-calc-in-six-days-inside-xbow-791f94.json"},"markdown_url":"https://newruntime.com/posts/zero-to-calc-in-six-days-inside-xbow-791f94.md","next_reads":[{"type":"topic","path":"/topics/google/","url":"https://newruntime.com/topics/google/","title":"Google","reason":"Explore the google topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/google.md","json_url":"https://newruntime.com/topics/google.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}