YOUR BROWSER, YOUR PHONE, YOUR WINDOWS BOX, YOUR SERVER. ONE MODEL BROKE ALL FOUR IN A FEW MONTHS. Two days ago I told everyone to patch their Ubuntu kernels for CVE-2026-98432. Today I found out who found that bug. Not a person. Anthropic published a writeup from its Frontier Red Team. An unreleased model spent a few months finding holes in Chrome, Safari, Android, Windows and Linux. And it didn't just find them. It chained them into working exploits and wrote the proof of concept itself. The Linux one got me. Multipath TCP, zero clicks from the victim. 48 minutes to leak a kernel pointer remotely, 5 more minutes and you have root on someone else's server. In my post I said the likely outcome was a crash. I was wrong, you could take the whole box. Chrome is its own story. Four bugs in a row, one click, and Calculator pops open on a Mac. Google ended up assigning 62 CVEs. A locked Pixel 9 got opened over USB and its photos pulled. Windows servers got crashed remotely after the model reverse-engineered the binary in Ghidra. The uncomfortable part is that the model doesn't get tired. Their setup runs a swarm of scanner agents in parallel and tracks coverage so no part of the codebase goes unread. Right now this is a team that gives vendors 90 days to patch. The real question is how long until the same thing is run by people who give nobody anything. Update Chrome. Update the kernel. Actually reboot.