- Google is leveraging Gemini-powered AI models to overhaul Chrome’s security, discovering and fixing 1,072 vulnerabilities across the last two milestones, more than the previous 23 milestones combined.
- To handle the massive increase in bug reports, Google has implemented multi-agent workflows in which AI agents automatically triage issues, draft candidate code fixes, serve as critics, and write cross-platform tests.
- To prevent attackers from exploiting known vulnerabilities before users update, Google is piloting two security releases a week and pioneering “dynamic patching” to apply critical background updates on the fly without requiring a full browser restart.
Google is fundamentally overhauling how it secures Chrome, leveraging AI to discover, triage, and patch vulnerabilities at a speed traditional security workflows simply can’t match. As the browser picks up user-facing tweaks like an Appearance menu and under-the-hood scroll performance upgrades, Google’s underlying defense mechanism is undergoing its biggest structural shift in years.
According to a deep dive published on the Chromium Blog, the Chrome Security team is now deploying custom Gemini-powered agent harnesses alongside specialized AI tools from Google DeepMind and Project Zero. The push is yielding immediate results: across the Chrome 149 and 150 release milestones, Google squashed 1,072 security bugs, which is more than the combined total of the previous 23 milestones. The automated pipeline even flagged a high-severity sandbox escape bug that had quietly survived in Chrome’s codebase for over 13 years.
