News
Google says AI helped Chrome fix 1,072 security bugs in two releases
Publication date not yet evaluated · Added bleepingcomputer.com
Page published
Coverage timeline
Single-source analysis — one report is available.
Why it matters
Google's deployment of LLM-based vulnerability discovery agents at scale marks a shift in how large software vendors find and fix flaws, reshaping the defensive side of the AI-security landscape and the economics of bug bounty programs.
Google reports that AI-powered tooling helped Chrome fix 1,072 security bugs across the Chrome 149 and 150 releases, more than all previous 23 milestones combined. The company says it now uses large language models across vulnerability management—discovery, reproduction, severity triage, and candidate patch generation—building on Project Zero's Naptime, DeepMind's Big Sleep agent, and a 2026 Gemini-powered agent harness that scans the Chrome codebase, including finding a 13-year-old sandbox escape.