Archive / 2026-10-15
Thursday, October 15, 2026
2 briefs filed.
Vulnerabilities6 min read
AI agents built a $250,000 Chrome exploit chain in six days — what it means for patching
XBOW used OpenAI's GPT-5.6 Sol to chain three Chrome bugs into a sandbox escape for about $40,000. All are fixed; make sure Chrome is at 152.0.7977.82 or later.
AI-Found VulnerabilitiesGoogle ChromeXBOW
AI Threats7 min read
PoeLLM botnet mines crypto on exposed AI servers — patch LiteLLM and take Ollama off the internet
Lumen's Black Lotus Labs says a botnet active since April has hit thousands of internet-facing servers, mostly LiteLLM and Ollama, and hides its control server in a poem on GitHub.
LiteLLMOllamaBotnet