Back Newswire.Co.Kr

XBOW Rewarded for Exploit Affecting a Billion Users - 뉴스와이어

Newswire.Co.Kr • October 15, 2026

A single human researcher collaborating with AI agents built a three-vulnerability attack chain, earning Google’s first $250,000 Chrome full-chain reward of 2026, affecting an estimated billion Chrome users.

Add Google as preferred Prefer Google

글자크기 Font Size A Small A Medium A Large A Very Large

Website:

Inkhouse for XBOW [email protected]

기자 발굴부터 성과 측정까지 PR 업무 시간을 절반으로

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AI-Driven Exploit Chain Earns $250K Chrome Bounty XBOW researchers developed a Chrome exploit chain in just six days, leveraging three vulnerabilities to execute code on Windows machines simply by loading a webpage. The vulnerabilities, confirmed by Google, were fixed in Chrome versions 152.0.7977.65 and 152.0.7977.82. The exploit utilized flaws in the V8 JavaScript engine, the animated WebP decoder, and Crashpad, Chrome's crash-reporting component. The project, which cost approximately $40,000 in AI compute resources, marks a significant acceleration in exploit development, previously taking months to achieve similar results. Google awarded XBOW a $250,000 bounty under its Vulnerability Reward Program for this achievement. The vulnerabilities were never against users. Users are advised to update their Chrome browsers to the latest versions to mitigate risks. 10 sources 33

XBOW Rewarded for Exploit Affecting a Billion Users - 뉴스와이어

The full story

Extracted Entities

Companies (1)

Email Addresses (1)