gcdRadar
archive/Research/AIR-2026-0326
closedclosed 28 Oct 2026Research1 Research / proof of conceptAI

Researchers Used OpenAI Model to Build Full-Chain Chrome Exploit

GPT-5.6 Sol, Google Chrome

Security researchers used a public OpenAI model to automate the discovery and chaining of three Google Chrome vulnerabilities into a working exploit. Google confirmed, patched the bugs, and rewarded the researchers.

first report
14 Oct 2026
last update
14 Oct 2026

Timeline · 1

  1. 14 Oct 2026Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days

Sources · 1

News and write-ups

  1. 2026-10-14
    Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days
    The Hacker News · thehackernews.com/2026/10/researchers-used-public-openai-model-to.html

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
AI-assisted intrusion
severity
1 · Research / proof of concept
targets
OpenAI, Google
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 14 Oct 2026 · first reported 14 Oct 2026
origin
News & research feeds
record
confidence 0.95 · created 2026-10-18 06:33Z · updated 2026-10-29 00:20Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Researchers Used OpenAI Model to Build Full-Chain Chrome Exploit

https://gcdradar.vercel.app/incidents/researchers-used-openai-model-to-build-full-chain-chrome-exp · AIR-2026-0326 · closed 2026-10-28

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2026-10-14
- AI role: AI-enabled attack
- Products: GPT-5.6 Sol, Google Chrome

## Summary

Security researchers used a public OpenAI model to automate the discovery and chaining of three Google Chrome vulnerabilities into a working exploit. Google confirmed, patched the bugs, and rewarded the researchers.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-14: Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days (https://thehackernews.com/2026/10/researchers-used-public-openai-model-to.html)

## Sources

- 2026-10-14 The Hacker News: Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days https://thehackernews.com/2026/10/researchers-used-public-openai-model-to.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    AI
  2. closed
    AI
  3. live
    AI
  4. closed
    OpenAI bots Attacker Scans for Credentials by Impersonating AI Bots

    Breaches & attacks · Exploited · since 28 Oct 2026

    AI
  5. closed
    AI
  6. closed
    AI