GPT-6 Astra 在 ExploitBench 拿到 100%
有人把 Astra 满分通过漏洞利用基准,和 Brave 刚修的 V8 在野漏洞放在一起看,结论是别再拖安全更新。
Take app, browser, and OS updates more seriously than ever. The economics of exploitation are changing fast. Brave desktop build 1.94.121 includes the Chromium fix for CVE-2026-85046 [a V8 vulnerability for which Google confirms an exploit exists in the wild]. Now connect that with OpenAI’s latest results. GPT-6 Astra scored 100% on ExploitBench. This benchmark gives an AI agent a known V8 vulnerability, source code, debugging tools and the patch (but no reference PoC). It measures progress toward arbitrary code execution. V8 is the engine involved in the browser bug above. My takeaway: as exploit development gets easier, delaying security updates becomes harder to justify. A published patch gives defenders a fix. It can also give attackers clues about how to exploit devices that haven’t updated. If Brave says “Relaunch to update,” do it now.
这条是引用着另一条写的:x.com/brave/status/2095907949499601157