Friday, October 16Global edition

Topic: Google vulnerability reward programs

Google pays XBOW $250,000 for AI-built Chrome sandbox escape

A four-person team used OpenAI's GPT-5.6 Sol model to develop a three-stage exploit that broke out of Chrome's renderer sandbox on Windows. It is the first full-chain Chrome payout under Google's vulnerability reward programme, which launched in April 2026.

1 min read