Tag
#Exploit Development
Defense & Research11 min read
Anthropic says an open-weight Chinese model now builds exploits almost like Mythos — and its guardrails fold for $4,400
Anthropic and NIST both tested Z.ai's GLM-5.3. Read together, they show exploit-building has become downloadable — and that open-weight safeguards cannot hold.
AnalysisOpen-weight modelsExploit Development
Vulnerabilities6 min read
AI agents built a $250,000 Chrome exploit chain in six days — what it means for patching
XBOW used OpenAI's GPT-5.6 Sol to chain three Chrome bugs into a sandbox escape for about $40,000. All are fixed; make sure Chrome is at 152.0.7977.82 or later.
AI-Found VulnerabilitiesGoogle ChromeXBOW
Vulnerabilities7 min read
Claude Opus 5 turned an undocumented image bug into access to OpenAI's internal code repo
Hacktron researchers chained a HEIF image flaw in OpenAI's Discourse forum to an SSO weakness and reached an internal repo. If you self-host Discourse or process user images, patch now.
DiscourselibheifClaude Opus 5