Researchers at Carnegie Mellon University have developed a benchmark demonstrating that AI agents like Claude Mythos and GPT-5.5 can autonomously create real browser exploits. While Mythos outperforms GPT-5.5 significantly, it comes at a much higher cost, raising questions about the trade-offs between performance and expense in AI development.