AgentsOct 13
Image: xbow.com
XBOW discloses Chrome exploit chain; all three flaws are fixed
Four XBOW researchers used OpenAI’s publicly available GPT-5.6 Sol to build a three-flaw Chrome attack that could run unrestricted code on Windows from an ordinary webpage, XBOW says. They worked from August 2, 2026, through August 7, 2026, spending roughly $40,000 on API calls. Agents searched code, tested hypotheses and developed exploit stages; researchers chose targets, checked results and replaced a duplicated stage with a backup vulnerability. XBOW credits accumulated human expertise and prior techniques. Google confirmed the chain, awarded $250,000 and fixed all three vulnerabilities.
Positive - Google fixed all three bugs in the researchers’ AI-assisted Chrome exploit chain, closing the route from a web page to unsandboxed Windows code execution.
AgentsOct 13
Image: claroty.com
Claroty reproduces refrigeration-controller exploits with AI in 28 minutes
In a lab experiment, Claroty Team82 used Claude Sonnet 4.6 through Cursor to reproduce three disclosed flaws in a Danfoss AK-SM 800A refrigeration controller in about 28 minutes for $6. The team began with public vulnerability identifiers, downloadable device software and analysis tools, without using its private original research. A researcher corrected the agent’s initial analysis of a login bypass and supplied Ghidra integration (software for examining compiled programs). The team chained two flaws to run commands with full administrator privileges on the lab device. Team82 originally disclosed the vulnerabilities in 2026; the actual attack path in the French supermarket incidents remains unconfirmed.
Positive - Claroty reproduced controller exploits in a laboratory, showing defenders how cheaply AI can chain known flaws into root access without attacking live systems.
AgentsOct 14
Image: noma.security
Noma discloses fixed Claude Desktop credential-theft flaw
Claude Desktop’s automatic preview could run JavaScript from attacker-controlled HTML larger than 256KB, Noma Labs disclosed. The SneakPeek flaw let that code read local files and steal remote-login keys, cloud credentials and Claude account-access tokens without another permission prompt, even during a request to inspect a project’s test report. Noma reported the issue on July 4, 2026, and Anthropic assigned it a severity rating of 8.7. Anthropic issued an incomplete patch on July 24, 2026, which Noma bypassed with a Web Worker (a way to run browser code in the background). Anthropic confirmed the bypass on August 3, 2026. The complete fix shipped on August 17, 2026, in Claude Desktop 1.30096.1 and later.
Positive - Anthropic shipped a complete fix after researchers bypassed its first patch, closing a preview-based route to local files and credentials.
AgentsOct 15
Image: securityweek.com
Booz Allen’s lab agents reach industrial controls and move equipment
Frontier AI agents met every defined objective in eight isolated industrial-system scenarios tested by Booz Allen, the company says. They began without source code, engineering documents or advanced system-specific guidance, then connected device discovery and research to attack planning and physical actions. Booz Allen presented the findings at the ICS Cybersecurity Conference before publication; the work involved controlled exercises, with no customer intrusion or particular vendor patch disclosed. One test progressed from a perimeter breach to industrial-control actions in a little over 16 minutes, while another mapped a robotic arm’s protection zones and motion limits and moved it within minutes. No single tested safeguard consistently stopped the agents.
Positive - Booz Allen demonstrated paths from perimeter compromise to equipment movement in isolated laboratory tests, giving industrial defenders concrete attack sequences to block.
RobotsOct 15
Image: theverge.com
Researcher accesses AI-toy chats and remotely rewrites robot behavior
Researcher Sammy Azdoufal accessed roughly 13 million conversations associated with an apparent active fleet of 68,000 Energize Lab robot toys, according to The Verge. More than 31,000 US profiles belonged to children, and exposed material included searchable conversations, detailed personal profiles and some publicly accessible photos and audio. The Verge verified transcript access on August 30, 2026, and contacted ten company addresses over more than a month. A sales manager said the findings had been forwarded to the technical team, while support returned an automated reply. Azdoufal also remotely changed a reporter’s Eiliko memory and instructions, causing it to deliver fabricated and inappropriate responses.
Positive - A researcher exposed access to millions of toy conversations and demonstrated robot manipulation, making fleet-wide privacy and control weaknesses visible to defenders.
TextOct 13
Image: securityweek.com
Chrome patches at least 15 Claude-assisted vulnerability findings
Google released Chrome updates fixing 37 vulnerabilities, including seven critical memory-safety flaws (bugs in how software handles computer memory). Windows and macOS received versions 155.0.8059.79/.80, while Linux received 155.0.8059.79. Anthropic’s Xinyang Ge reported at least 15 findings with Claude assistance. Mozilla separately released Firefox 158 with 77 fixes, nine credited to OpenAI’s Amy Burnett. AI involvement has not been established for all 114 fixes across the two browsers.
Positive - Chrome and Firefox shipped fixes for AI-assisted vulnerability findings, turning defensive research into closed security holes across widely used browsers.
