Six Days to a Chrome Full-Chain Exploit

Building a full-chain exploit against Chrome used to take elite teams months. XBOW did it in six days with a publicly available AI model and earned a $250,000 bounty from Google. If one of the most hardened pieces of software on the planet falls that fast, the clock on your own software is already running.

Join Distinguished Engineer Brendan Dolan-Gavitt for a look inside the two chains XBOW built. The first was human-driven and lost to a bug collision. The second was orchestrated with AI agents and designed to survive one. Find out:

• What it takes to chain bugs from an ordinary web page to full control of a Windows machine
• How we structured a modular, agent-driven campaign with backups ready for every stage
• What falling exploit costs mean for defenders, and where human judgment still matters