{"type":"raw_signal","id":"an-off-the-shelf-openai-model-helped-hack-2cd768","slug":"an-off-the-shelf-openai-model-helped-hack-2cd768","title":"An off-the-shelf OpenAI model helped hack Google Chrome : an engineer at security startup Xbow spent $40,000 on GPT-5.6 to chain three unpatched Chrome bugs and won Google's top $250,000 bounty.","description":"## Xbow reports GPT-5.6-assisted chain of three Chrome vulnerabilities","retrieval_nugget":"## Xbow reports GPT-5.6-assisted chain of three Chrome vulnerabilities","observed_at":"2026-10-14","record_date":"2026-10-14","date_kind":"observed_at","why_it_matters":"Source: https://www.forbes.com/sites/the-wiretap/2026/10/13/how-an-off-the-shelf-openai-model-found-three-google-chrome-zero-days","novelty":"notable","verification_level":"source-linked","signal_type":"announcement","source_platform":"forbes.com","topics":["google"],"entities":["OpenAI","GPT-5.6","Xbow","Google Chrome","Google","Brendan Dolan-Gavitt","Oege de Moor"],"related_patterns":["agent-security-moves-to-runtime-boundaries"],"source_url":"https://www.forbes.com/sites/the-wiretap/2026/10/13/how-an-off-the-shelf-openai-model-found-three-google-chrome-zero-days","source_urls":["https://www.forbes.com/sites/the-wiretap/2026/10/13/how-an-off-the-shelf-openai-model-found-three-google-chrome-zero-days"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"signal:an-off-the-shelf-openai-model-helped-hack-2cd768","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/signals/an-off-the-shelf-openai-model-helped-hack-2cd768/","markdown":"https://newruntime.com/signals/an-off-the-shelf-openai-model-helped-hack-2cd768.md","json":"https://newruntime.com/signals/an-off-the-shelf-openai-model-helped-hack-2cd768.json"},"next_reads":[{"type":"topic","path":"/topics/google/","url":"https://newruntime.com/topics/google/","title":"Google","reason":"Explore the google topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/google.md","json_url":"https://newruntime.com/topics/google.json"},{"type":"collection","path":"/signals/","url":"https://newruntime.com/signals/","title":"Raw Signals","reason":"Open every source-linked raw signal.","media_type":"text/html","json_url":"https://newruntime.com/signals.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}