Google is rebuilding Chrome security using AI to catch hidden vulnerabilities

Credit: Edgar Cervantes / Android Authority TL;DR Google is leveraging Gemini-powered AI models to overhaul Chrome’s security, discovering and fixing 1,072 vulnerabilities across the last two milestones, more than the previous 23 milestones combined. To handle the massive increase in bug reports, Google has implemented multi-agent workflows in which AI agents automatically triage issues, draft candidate code fixes, serve as critics, and write cross-platform tests. To prevent attackers from exploiting known vulnerabilities before users update, Google is piloting two security releases a week and pioneering “dynamic patching” to apply critical background updates on the fly without requiring a full browser restart.

Google is fundamentally overhauling how it secures Chrome, leveraging AI to discover, triage, and patch vulnerabilities at a speed traditional security workflows simply can’t match. As the browser picks up user-facing tweaks like an Appearance menu and under-the-hood scroll performance upgrades , Google’s underlying defense mechanism is undergoing its biggest structural shift in years. According to a deep dive published on the Chromium Blog , the Chrome Security team is now deploying custom Gemini-powered agent harnesses alongside specialized AI tools from Google DeepMind and Project Zero.

The push is yielding immediate results: across the Chrome 149 and 150 release milestones, Google squashed 1,072 security bugs, which is more than the combined total of the previous 23 milestones. The automated pipeline even flagged a high-severity sandbox escape bug that had quietly survived in Chrome’s codebase for over 13 years.