Xbow工程師Brendan Dolan-Gavitt利用OpenAI的gpt-5.6-sol模型，成功挖掘出谷歌Chrome瀏覽器的全鏈漏洞，贏得了谷歌頒發的首個25萬美元漏洞賞金。在爲期6天的測試中，雙方採取人機協作模式：人類研究員負責挑選目標、提供上下文並決定代碼組合，AI代理則負責搜索源代碼、測試假設並起草漏洞利用階段的代碼。 據Xbow通過重建Codex日誌估算，此次任務的計算資源耗資約4萬美元，不僅僅佔獎金的一小部分，其成本和時間也遠低於傳統模式下所需的數月專家人工投入。該攻擊鏈共利用了三個獨立漏洞，跨越兩個防護邊界，成功將標籤頁中的普通JavaScript轉化爲可繞過所有沙箱限制並在外部運行的代碼。谷歌隨後重現了該攻擊鏈並確認了全部三個漏洞，目前已發佈修復補丁。

市場消息：沙特阿美位於宰赫蘭（Dhahran）的總部遭胡塞武裝擊中。

Goldman Sachs has prearranged a $450m charitable donation funded by revenue it earned from wealthy clients’ gains in SpaceX’s record IPO. The bank disclosed the payment as a separate special charge in its third-quarter results, saying it reduced diluted EPS by about $1. Goldman helped wealthy clients invest in SpaceX more than five years ago; SpaceX listed earlier this year at a $1.77tln valuation, producing large client gains and leaving Goldman with hundreds of millions of dollars in related revenue. CEO David Solomon signaled in September the bank might use the windfall to accelerate philanthropy for tax efficiency.