Three chained zero-days and roughly 40,000 dollars in model charges delivered code execution outside the browser sandbox on Windows.
A 16-year-old used a homemade AI bot to find an auth flaw that opened Microsoft's analytics backend.
Hacktron used Claude Opus 5 to exploit a libheif memory bug, then walked through OpenAI's single sign-on into staff accounts.
Chinese AI agents from Kimi K3 autonomously found zero-day vulnerabilities in Redis and developed functional remote code execution exploits.
Google overhauls Chrome and Android bug bounty programs in response to AI-driven vulnerability discovery, dropping Chrome base rewards to 00…