GPT

Cybersecuritynews •Guru Baran • July 15, 2026

OpenAI’s GPT-5.6 Sol Ultra model independently constructed a complete, working exploit chain for Google Chrome, using nothing but publicly available security patch commits as its starting point. Researchers from Hacktron tasked three frontier AI models, GPT-5.6 Sol Medium, Sol Ultra, and Grok 4.5, with a real-world offensive security challenge: analyze V8 (Chrome’s JavaScript engine) security-fix […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GPT-5.6 Sol Ultra Constructs Chrome Exploit Chain A security researcher reported that OpenAI's GPT-5.6 Sol Ultra model successfully created a working renderer exploit for Google Chrome version 149.0.7827.201. The exploit leveraged vulnerabilities in the V8 JavaScript engine and WebAssembly infrastructure, enabling it to launch the macOS Calculator application from a sandboxed Chrome renderer process. This exploit was developed using publicly available security patch commits. Researchers from Hacktron tasked three AI models, including GPT-5.6 Sol Ultra, with analyzing V8 security fixes, leading to this significant outcome. The exploit demonstrates the potential for AI to automate complex security tasks, raising concerns about future exploitation. Currently, there are no reports of active exploitation of this specific exploit. The incident highlights the evolving capabilities of AI in offensive security. 2 sources 55

Extracted Entities

Platforms (1)

Tools (1)

Google Chrome