Google Chrome Fixes 1,072 Security Bugs in June Using AI—More Than Past Two Years Combined
12 Sources
[1]
Google says it fixed more Chrome bugs in June than over the past two years, thanks to AI
With help from its internal AI tools, Google says it has patched more security flaws in its Chrome browser in the last month than in the past two years combined. The tech giant announced on Thursday that it has fixed a whopping 1,072 security bugs in the last two versions of Chrome, both released
[2]
Chrome Needs Twice-a-Week Patching Thanks to AI Bug Hunting
Google's Chrome browser has always been focused on pushing security updates. A decade ago it was controversial that the browser, the first to add automatic updates, distributed patches every six weeks. Now it's the norm for critical, widely used software to get security fixes every few weeks, but
[3]
AI is finding bugs faster than humans can fix them: How enterprise security teams must adapt
Follow ZDNET: Add us as a preferred source on Google. ZDNET's key takeaways * AI-discovered security problems are growing like a tidal wave. * Whether using a PC or running a data center, everyone will be affected. * We are not ready for what's coming. The good news is that AI is finding
[4]
Google Tests Doubling Chrome's Security Patch Cadence to Outpace Hackers
Since 2023, Google has released weekly security updates for the Chrome browser, but the company is now testing a twice-per-week cadence to stay ahead of "AI-powered attacks." A Google white paper released Thursday details its efforts to use large language models to accelerate the discovery of
[5]
Google says AI helped Chrome fix 1,072 security bugs in two releases
Google says artificial intelligence is dramatically increasing the number of security vulnerabilities it can find and fix in Chrome, with more than 1,000 security bugs patched across the browser's two most recent releases as it expands its use of AI. According to Google, Chrome 149 and Chrome 150
[6]
How Google used AI agents to find and fix 1,072 Chrome security bugs - in 60 days
Follow ZDNET: Add us as a preferred source on Google. ZDNET's key takeaways * AI found a decade-old Chrome flaw humans repeatedly missed. * Google said its AI workflow saves weeks of developer time. * Chrome may need twice-weekly patches to keep billions safe. Chrome and its open-source
[7]
AI is finding so many Chrome security flaws that Google may start updating it twice a week
Serving tech enthusiasts for over 25 years. TechSpot means tech analysis and advice you can trust. Forward-looking: Google is speeding up Chrome's update cycle as AI tools uncover a growing number of security flaws in the browser's code. Chrome versions 149 and 150, released within weeks of each
[8]
Google is rebuilding Chrome security using AI to catch hidden vulnerabilities
To prevent attackers from exploiting known vulnerabilities before users update, Google is piloting two security releases a week and pioneering "dynamic patching" to apply critical background updates on the fly without requiring a full browser restart. Google is fundamentally overhauling how it
[9]
Google's AI is digging up Chrome bugs that humans missed for years
Here's how Google is using Gemini AI to find, triage, and patch Chrome security bugs faster than ever. I've always assumed Chrome's endless update notifications were just routine housekeeping with a batch of actually useful features every now and then. Turns out some of them are patching bugs that
[10]
Stronger with every update: How we're making Chrome and the web safer in the AI Era
* The bug is found. * The bug is triaged. * The bug is fixed. * A new update of Chrome with the bug fix is released. * Chrome is restarted and the update is applied. Our goal is for every one of these steps to happen as quickly as possible. Finding vulnerabilities The Chrome Security team
[11]
Google's AI patched more Chrome bugs in two releases than it had in two years, including a 13-year-old flaw
Google has published a white paper detailing how AI is transforming Chrome's security pipeline. Chrome versions 149 and 150, both released in June, collectively fixed 1,072 security bugs. That figure exceeds the total number of bugs patched across the previous 23 Chrome versions combined, dating
[12]
Google AI Finds Sandbox Escape Bug in Chrome's Codebase
Google is using AI to improve security in its Chrome browser codebase. Recently, the California-based giant announced its new AI vulnerability agent, created with its Gemini security LLM model. It detected a long-lived sandbox escape bug that could trick Chrome into reading local files. The bug
Share
Copy Link
Google fixed 1,072 security bugs in Chrome 149 and Chrome 150 using AI-powered tools, exceeding the 1,036 patches from the previous 23 releases over two years. The company is now piloting twice-a-week security updates to stay ahead of AI-powered cyberattacks as vulnerability discovery accelerates exponentially.
AI Transforms Chrome's Security Patching at Unprecedented Scale
Google has fixed 1,072 security bugs across Chrome 149 and Chrome 150, both released in June, using AI-driven vulnerability discovery tools. This figure surpasses the 1,036 security bugs patched across the previous 23 Chrome releases spanning two years
1
. The exponential increase marks a turning point in how AI is reshaping cybersecurity, with large language models like Gemini now integrated throughout Google's vulnerability management process5
.
Source: TelecomTalk
Doug Turner, Chrome's director of engineering, stated that LLMs have "fundamentally shifted the economics of cybersecurity, transforming vulnerability discovery into an automated, industrial-scale operation"
1
. Google now uses AI across the entire workflow—from discovering flaws and reproducing reports to determining severity, generating candidate patches, and creating tests5
.How AI Bug Hunting Accelerated Chrome's Vulnerability Discovery
Google's AI-powered approach builds on over a decade of machine learning work in security fuzz testing, dating back to 2012
2
. However, 2026 represents what Parisa Tabriz, Chrome's vice president and general manager, calls "an inflection point both for offense and defense"2
.The company developed specialized systems including Naptime, created with Project Zero, which provided AI models with vulnerability research tools. Google later collaborated with DeepMind on Big Sleep, an AI agent that discovered flaws in Chrome's V8 JavaScript engine
5
. One AI-discovered vulnerability was a Chrome sandbox escape that had existed in the codebase for over 13 years5
.Turner explained that AI models are trained with encyclopedic knowledge: "Every CVE, every bug the model knows about. And every line of code in Chromium's history, it knows the reason why that line was changed"
2
. This context allows AI to identify weaknesses across Chrome's massive codebase, including legacy features like printing that receive less human attention.Twice-a-Week Patching Pilots to Counter AI-Powered Cyberattacks
Google Chrome is piloting a twice-a-week security patch cadence to address the reality that AI is finding bugs faster than humans can process them
2
. The browser already moved toward bi-weekly major releases with weekly security updates, but the volume of discoveries necessitated further acceleration4
.
Source: BleepingComputer
"In the face of fast-moving, AI-powered attacks, our delivery cadence must accelerate even further," Google stated in its white paper
4
. The urgency stems from a critical vulnerability: when Google publicly patches a flaw, attackers can reverse-engineer the issue before fixes reach users' machines. Since committed fixes typically take weeks to reach Chrome's stable channel, minimizing this "patch gap" has become essential4
.Related Stories
Industry-Wide Impact Shows AI's Dual-Edged Effect on Cybersecurity
Google isn't alone in experiencing this surge. Microsoft patched a record 570 security flaws in its July 2026 Patch Tuesday, citing its own AI usage to explain the jump
1
. By March 2026, Google had received more security bug reports through its Chrome Vulnerability Reward Program than during all of 2025, prompting modifications to prioritize reports that add value beyond automated findings5
.
Source: Wired
Dan Lorenc, CEO of security company Chainguard, noted that AI is "finding vulnerabilities in the software they write and the software they use at a pace that is far exceeding defenders' ability to patch and get updates"
3
. The challenge extends beyond developers to system administrators, CISOs, and end users struggling to keep pace with continuous patching3
.Dynamic Patching and Structural Security Improvements on the Horizon
To reduce disruption from frequent updates, Google is developing dynamic patching technology that would apply security fixes without requiring browser restarts
4
. Starting with Chrome 150 on macOS, the browser can automatically restart to apply pending updates when running in the background without open windows5
.Beyond immediate patching, Chrome's security team is focused on structural changes, including rewriting portions of C++ code in Rust, a memory-safe programming language that eliminates entire categories of common software vulnerabilities
2
. Google's automated vulnerability triage systems now filter spam, reproduce proof-of-concept exploits, assign severity ratings, and route reports to developers, saving hundreds of hours monthly5
. In May alone, these systems prevented over 20 vulnerabilities from reaching production5
.Tabriz and Turner suggest the current spike may eventually plateau as AI exhausts discoverable bugs in mature software like Chrome, creating a new equilibrium
2
. However, the immediate reality is clear: AI's impact on cybersecurity has created both unprecedented defensive capabilities and an overwhelming volume of work that demands fundamental changes to how software security operates across the industry.References
Summarized by
Navi
[1]
[3]
[5]
Related Stories
AI in cybersecurity sparks new cyber arms race as vulnerability discovery outpaces patching
16 Jul 2026•Technology
AI bug hunters flood open-source security with reports—maintainers struggle to separate signal from noise
10 Mar 2026•Technology
Anthropic Mythos discovers 271 software vulnerabilities in Firefox 150 before release
22 Apr 2026•Technology
Recent Highlights
1
OpenAI Claims AI Math Breakthrough on Navier-Stokes, Sparks Controversy Over Credit and Future of Research
Science and Research
2
Anthropic CEO Calls to Slow AI Development Pace After Security Incidents Spark Industry Alarm
Policy and Regulation
3
Nvidia CEO Jensen Huang Declares AGI Has Arrived With OpenAI's GPT-6 Astra Release
Technology
Recent Highlights
Today's Top Stories
Don’t drown in AI news. We cut through the noise - filtering, ranking and summarizing the most important AI news, breakthroughs and research daily. Follow topics that matter to you and stay ahead.
