30 October 2026

Open model reportedly built Firefox exploits from unreleased patches

• Research group Epoch reports an open-weight AI model reverse-engineered unreleased Firefox security fixes to create working exploits.
• The exploits were built for six Firefox versions, at roughly $1,000 per exploit.
• The finding points to a risk: attackers may be able to exploit a bug in the gap between a fix being written and being shipped to users.

How it was covered

Latent Spaceswyx & Alessio

Exploit cost and timing, the newly found Firefox bug and patch, and the Chrome test results