GPT-5.6 协助攻破 Chrome 防线，获 Google 25 万美元漏洞赏金
GPT-5.6 helped break Chrome’s defenses for a $250,000 Google bounty.
Xbow 工程师 Brendan Dolan-Gavitt 用 OpenAI 的 gpt-5.6-sol 对 Chrome 源码进行了六天测试，算力成本约 4 万美元，最终串联三个漏洞、跨越两道防护边界，把 Chrome 标签页中的普通 JavaScript 变成沙箱外运行的代码。Google 复现了该攻击链并确认全部三个漏洞，发布修复后按规则支付了首个 25 万美元的全链路 Chrome 赏金。智能体负责搜索代码、验证假设和起草利用阶段，Dolan-Gavitt 与同事负责选定目标、提供上下文并决定如何拼接各环节。
推荐理由
AI 评分 87
这条记录展示了智能体参与真实漏洞挖掘的成本结构，读者可据此判断自动化安全研究的投入产出比。
主题
正文
当前显示原文，中文全文译文尚未就绪。
GPT-5.6 helped break Chrome’s defenses for a $250,000 Google bounty.
Xbow engineer Brendan Dolan-Gavitt ran OpenAI’s gpt-5.6-sol, against the browser’s source code over six days and $40,000 of compute
The agents searched code, tested hypotheses, and drafted the exploit stages, while Dolan-Gavitt and colleagues picked targets, supplied context, and decided which pieces to join.
Reconstructing the Codex logs, Xbow put the compute bill at roughly $40,000, a fraction of the prize, and well below the months of specialist labor such work once demanded.
The finished chain turned ordinary JavaScript in a Chrome tab into code running outside every sandbox, crossing two protective boundaries through three separate flaws. Google reproduced the chain, confirmed all three bugs, shipped fixes, and awarded the first $250,000 full-chain Chrome reward under rules it set