Feeds.Feedburner Anthropic AI Model Reveals Critical Exploits in Chrome and Linux
Article Content
- •Anthropic's AI model discovered and chained multiple critical vulnerabilities.
- •All identified flaws have been patched, with no known exploitation in the wild.
- •The Chrome exploit involved a series of chained vulnerabilities leading to code execution.
An unreleased AI model from Anthropic identified multiple security flaws in Chrome, Safari, Windows, and Linux, chaining them into proof-of-concept exploits. The vulnerabilities have been patched, and no real-world attacks have been reported. The Chrome exploit involved a series of flaws that allowed code execution outside the browser's sandbox, while the Safari exploit bypassed the same-origin policy. Anthropic reported 62 flaws to Google, all rated critical or high. Specific CVEs include CVE-2026-98432, published on October 15, 2026, with a CVSS score of 9.8. The report raises questions about the extent of human involvement in the exploit development process. The company has not disclosed the model's name or detailed the human contributions to the exploit creation.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Anthropic and CVE-2026-33096 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What systems are affected?
Have these vulnerabilities been exploited in the wild?
What should organizations do now?
Continue Reading
China-linked Hackers Exploit PHP2Shell to Compromise 25 Firewalls A China-linked threat actor has exploited vulnerabilities in PHP2Shell (CVE-2026-109618, CVE-2026-109619) and the Fragnesia privilege escalation bug (CVE-2026-46300) to gain root access to 25 firewalls, including those in an U.S. The attackers identified vulnerable systems using the FOFA search engine and executed…
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…