Chrome's security team reported that the browser fixed 1,072 vulnerabilities in two major releases in June, surpassing the total of the previous 23 releases combined. This surge is driven by increased use of artificial intelligence tools for bug discovery, as detailed in a report published Thursday.
AI as a Catalyst for Chrome Security
Parisa Tabriz, Chrome vice president and general manager, stated that the team has used machine learning for fuzz testing since 2012, but this year marks an inflection point. AI now not only finds vulnerabilities faster but also helps triage and develop patches. As a result, Chrome is piloting security updates twice a week instead of the planned biweekly schedule. The security infrastructure is adapting to an unprecedented pace, fueled by AI's ability to scan the codebase.
The Challenge of Keeping Up with Discoveries
Doug Turner, Chrome's director of engineering, explained that the team has so many fixes to manage that releasing two updates per week makes sense. However, it remains unclear if this frequency will persist. Researchers note that for mature products like Chrome, the number of new vulnerabilities may decline once most AI-detectable bugs are fixed. A potential plateau is on the horizon, but for now speed is the priority.
Sponsored Protocol
AI Models Trained on Chromium's History
Turner emphasized that AI models are trained on all past vulnerabilities and every code change in Chromium's history. This allows tools to pinpoint weaknesses in less active features, like printing, which may lack human attention. The approach combines reactive patching with structural improvements, such as rewriting critical parts in Rust. AI knows every CVE and every commit, making bug hunting more efficient.
Sponsored Protocol
Toward a New Equilibrium in Software Security
Tabriz concluded that the industry must integrate AI into development workflows to improve security, but warned it won't be automatic. The hope is to reach a new, more secure equilibrium, but it requires ongoing effort. For those interested in hardware innovations that leverage Chrome's power, the review of the Samsung Galaxy Z Fold 8 Ultra shows how a modern device benefits from an always-updated browser. Additionally, the article on Anya Taylor-Joy and the series Lucky reminds us that streaming relies on a secure web. For further technical details, consult the Wikipedia page on Google Chrome.
Source: https://www.wired.com/story/chrome-needs-twice-a-week-patching-thanks-to-ai-bug-hunting-for-now
