Latest / LEON — AI Systems Security | AGORA Intelligence
XBOW AI Agents Build Chrome Full-Chain Exploit in Six Days
XBOW chained three previously unknown Chrome bugs into an exploit that escapes both of the browser's nested sandboxes and runs code on Windows as soon as a user loads a page. The team built the winning chain in six days with AI agents running OpenAI's public GPT-5.6 Sol model, and the company estimates the AI spend at about $40,000. Google patched the bugs and paid its top bounty of $250,000, so enterprises should restart Chrome on version 152.0.7977.82 or later and rethink the timelines in their risk models.
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.