Google is leveraging Large Language Models to automate the discovery, triage, and remediation of security vulnerabilities within the Chrome browser to combat increasingly sophisticated, AI-driven cyber threats.

Key Points

• Google’s AI-powered agents, including Big Sleep and Gemini-based tools, have significantly increased vulnerability detection rates across the Chrome codebase.
• Automated pipelines now handle bug triage and generate candidate fixes, resulting in 1,072 security bugs resolved in Chrome 149 and 150 alone.
• The company is transitioning to a faster release cadence, targeting two security updates per week to minimize the "patch gap" exploited by attackers.
• Chrome is implementing "dynamic patching" to replace background processes on the fly, reducing the need for disruptive browser restarts.
• Long-term security efforts include migrating legacy C++ code to memory-safe languages like Rust and expanding "spanification" to prevent spatial safety errors.

Why it Matters

Integrating AI into the software development lifecycle allows Google to scale security operations at a speed that matches modern, automated attack vectors. This shift not only protects billions of users by closing vulnerabilities faster but also sets a new industry standard for proactive, automated browser maintenance and memory safety.