[CLSTR]
API
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 6 sources · 1 days · First seen · Last updated

Google Chrome AI-driven vulnerability research

Overview

Google restructured its Chrome browser bug bounty program to address a surge in automated vulnerability reports generated by artificial intelligence. The company increased rewards for memory safety issues, raising the base reward for memory corruption from $500 to $2,000, while offering up to $20,000 for higher-tier vulnerabilities.

Following these policy adjustments, security researchers at XBOW utilized AI agents to discover and exploit a full-chain vulnerability in Google Chrome. The team used AI to analyze code and identify memory leaks, chaining three vulnerabilities to bypass the browser’s sandbox and achieve arbitrary code execution on Windows. The process took six days, a task XBOW estimated would typically require six to nine months of manual work by specialists. Google has since patched the vulnerabilities.

Entities

Google · Chrome · XBOW

Timeline

  1. [TECHNOLOGY] 3 sources
    Google pays $250,000 to XBOW for AI-driven Chrome exploit

    XBOW researchers used AI agents to discover a complex Chrome security exploit in just six days, earning a $250,000 Google bounty for bypassing the browser's sandbox.

  2. [TECHNOLOGY] 3 sources
    Google increases Chrome bug bounty rewards to combat AI-driven vulnerability reports

    Google is increasing Chrome bug bounty rewards, raising base payouts for memory corruption vulnerabilities from $500 to $2,000 to combat AI-generated report surges and improve browser security.

Sources

chiccheinformatiche.com · cybernoz.com · ithome.com · jornal24horas.com.br · leiaja.com · trn.mk