The Chrome security team at Google has closed a total of 1,072 security vulnerabilities in Chrome versions 149 and 150 using its own AI agents – more than in the previous 23 versions combined. The Gemini system continuously scans the entire Chrome source code, while the specialized agent Big Sleep specifically searches for unknown vulnerabilities. According to company information, one of the discovered vulnerabilities remained undetected in the code for 13 years.
Multiple AI agents work hand in hand on the code
For automated bug detection, Google combines several specialized systems. Gemini continuously analyzes the complete Chrome source code for suspicious patterns, while the agent Big Sleep, developed in 2025 together with Google DeepMind and the security team Project Zero, specifically searches for previously unknown vulnerabilities. The predecessor was the 2024 tool Naptime, which laid the foundation for today’s discovery rate.
Once an agent has identified a vulnerability, the tool CodeMender takes over the creation of a correction proposal. Other AI instances then check the patch in a kind of counter-review and write matching tests before a human approves the change. One of the vulnerabilities found this way – listed as entry 487383169 in the internal bug tracker – allowed a compromised browser process to read local files and remained undetected for 13 years according to company information. In May 2026 alone, the system reportedly blocked more than 20 vulnerabilities, including one classified as critical. The stated total of 1,072 fixed vulnerabilities cannot be independently verified; however, several trade outlets have adopted Google’s figures in their reporting.
Updates will come more often but disrupt less
The higher discovery rate is also changing the rhythm in which Chrome is updated. Instead of irregular intervals as before, Google plans to ship security-related updates twice a week going forward. The company is also testing an experimental method called dynamic patching, meant to apply fixes without requiring users to restart the browser every time. Restarts are instead meant to happen preferably during phases when the computer is not actively in use.
The change automatically affects all Chrome users worldwide, including Germany and the rest of the EU, with no separate opt-in required. There are no costs involved, since Chrome remains a free product. Google has not yet given a fixed date for when the twice-weekly cadence will apply across the board; the figures for Chrome 149 and 150 already describe the current state, according to the company. Users will barely notice the AI search running in the background, but should keep confirming update prompts in the browser promptly.
Comparison figures show the limits of automated search
The push is part of a series of cybersecurity experiments at Google. Just in July, the company introduced Gemini 3.5 Flash Cyber, a separate model that found 55 previously unknown vulnerabilities in a test on the V8 engine – more than Anthropic’s Claude Opus 4.6, which found 36. Access to this attack-simulation-focused system is currently granted only to governments and select partners for security reasons, since the technology could also be used offensively, according to Google.
How effective AI-supported discovery tools actually are across the industry is shown by an evaluation from security vendor VulnCheck: of the vulnerabilities discovered with AI tools in the first half of 2026, only 1.3 percent were actually exploited by attackers – a share roughly comparable to that of traditionally discovered vulnerabilities. At the same time, the time to first attack on newly disclosed vulnerabilities has dropped industry-wide from 120 to 80 days.
What will matter is whether Google can keep up the pace of automated bug fixing even as attackers use their own AI tools to exploit new vulnerabilities faster. So far, the number of discovered and closed vulnerabilities is growing faster than the time to first attack is shrinking – whether that lead holds will only become clear in future Chrome versions.
