PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

XBOW Built a Chrome Full-Chain Exploit Affecting a Billion Users in Six Days

xbow.com | blog | #ai-security | #exploitation | #chrome | #xbow | #ai-agent | #full-chain
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

XBOW recently discovered and built a Chrome full-chain exploit affecting an estimated billion users globally.
Published
Collected

Related coverage

blog · xbow.com
A Vulnerability Is a Hypothesis. An Exploit Is the Proof.
Every security team runs on one scarce resource: the attention of those who can fix things. Only an exploitable bug is worth interrupting an engineer for.
blog · semperis.com
AD Group Risks: Hidden Powers of Account Operators
# AD Group Risks: Hidden Powers of Account Operators * AD Security 101 * Aug 28, 2026 * Read 5 MIN * What can Account Operators actually do? * Why does the Account Operators group become dangerous...
tool · hunt.io
Inside a PaperCut Attacker’s AI Toolkit: Agent Instructions, Exploit Code, a Second RCE, and Victims Across 45+ Countries
A PaperCut attacker left their open directories exposed. We reconstruct the AI-driven exploitation pipeline, a second XML-RPC RCE path, and chisel persistence from the operator's own server.
blog · xbow.com
How Attackers Are Using AI & What Defenders Must Do
Attackers are running AI driven attack chains from recon to exploitation in minutes. Here’s what actually changed, and why defenders need AI pentesting to keep pace.
blog · xbow.com
PHP2shell: Patch Today, Then Prove It
The PHP Project just shipped fixes for the vulnerability dubbed PHP2shell. Step one is to patch, confirm it took, and make a plan for anything too old to patch.
blog · xbow.com
Don't Make It Easy for Attackers: 5 Common AppSec Gaps
Discover five common AppSec gaps that give attackers an advantage and learn how better testing, validation, and remediation can reduce exploitable risk.
Back