Security research team XBOW says it used OpenAI's GPT-5.6 Sol and other models, plus four researchers, to build a full-chain Chrome exploit and gain full system access in six days; it estimates the same work done entirely by humans would take about six months. The three flaws were reported to Google and have been fixed, with Google paying a $250,000 bounty, and XBOW says roughly 1 billion users were potentially affected. XBOW put its compute cost at about $40,000, with AI searching Chrome source code, testing ideas, building proof-of-concept code and drafting the initial exploit, while humans set strategy, chose research directions, reviewed the agents' output and adjusted their actions.

XBOW·OpenAI·GPT-5.6 Sol·+2