{"id":169080,"date":"2026-04-17T17:12:21","date_gmt":"2026-04-17T15:12:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/chat-bot-anthropic-claude-opus-napisal-eksplojt-dlya-google-chrome-vsego-za-2283"},"modified":"2026-04-18T10:56:25","modified_gmt":"2026-04-18T08:56:25","slug":"chat-bot-anthropic-claude-opus-napisal-eksplojt-dlya-google-chrome-vsego-za-2283","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/chat-bot-anthropic-claude-opus-napisal-eksplojt-dlya-google-chrome-vsego-za-2283","title":{"rendered":"Chatbotten Anthropic Claude Opus skrev et exploit til Google Chrome for kun $2283","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cybersecurity researcher Mohan Pedhapati fortalte<\/a>, how he used the AI model Anthropic Claude Opus 4.6 to write a complete exploit chain for hacking the JavaScript V8 engine in Google Chrome 138, which is used by the current Discord client.<\/p>\n

<\/center>\"Chatbotten<\/p>\n

The process of writing the exploit chain took a week, the researcher reported \u2014 it involved 2.3 billion tokens and $2283 spent on access to the AI model via the API; he also contributed his own efforts, spending a total of 20 hours solving deadlock issues. The cost of creating the hacking scheme seems significant for an individual, acknowledged Mohan Pedhapati; on the other hand, without external help, a person would work on a similar project for several weeks. The project also turned out to be economically beneficial \u2014 the reward from Google and Discord for reporting such an exploit could be around $15,000. And this is only the legal market \u2014 cybercriminals might pay a different amount for a zero-day vulnerability.<\/p>\n

Many services release their applications on the Electron framework, which is based on Chrome \u2014 this is done not only in Discord but also, for example, in Slack. However, the current code of the framework is one version behind the browser, and app developers do not always quickly update dependencies, nor do users always install the latest versions of applications. The Discord client was chosen by the researcher because it runs on Chrome 138, which is nine major versions behind the current browser version.<\/p>\n

Enhver begynderprogrammet, siger Mohan Pedhapati, kan med tilstr\u00e6kkelig t\u00e5lmodighed og en API-n\u00f8gle til adgang til AI-modellen bryde igennem uopdateret software - \"det er et sp\u00f8rgsm\u00e5l om tid, ikke sandsynlighed\". Desuden er \"hver patch i princippet en ledetr\u00e5d til et exploit\", fordi open source-projekter udvikles gennemsigtigt, hvilket betyder, at rettelser ofte er offentligt tilg\u00e6ngelige i koden, f\u00f8r den samlede opdaterede version af programmet frigives. For at beskytte applikationer mod s\u00e5danne angreb anbefaler eksperten at holde \u00f8je med afh\u00e6ngighederne og hurtigt lave \u00e6ndringer samt automatisk udsende sikkerhedspatcher, s\u00e5 brugersoftware ikke forbliver s\u00e5rbar, hvis opdateringen blot bliver glemt. Endelig b\u00f8r open source-projekter v\u00e6re forsigtige med offentligheden af detaljerede oplysninger om s\u00e5rbarheder.<\/p>\n

Kilde:<\/strong><\/p>\n