XBOW Broke Chrome in Six Days With a Public AI Model
By TechPulse USA It took six days, about $40,000 in AI compute, and a web page nobody had to click anything on. That is the whole scandal, and the whole story: a small security team working with a publicly available AI model built a complete attack chain for Google Chrome, the browser guarding roughly a billion Windows desktops, and Google paid them $250,000 for the privilege of being shown how. This was not a hack in the Hollywood sense. Nobody broke into a server room or guessed a password. The team at XBOW, an autonomous offensive-security company, chained three separate, previously unknown Chrome bugs together so that simply loading a malicious web page could run code outside the browser's sandbox on a Windows machine. Google has since confirmed all three bugs, fixed them, and paid the bounty. Nothing here is still live for an attacker to copy. What is still live is the question the six days ask of everyone else: if this now costs $40,000 and a week, what exactly is your se...