
What happened
Google announced Thursday that it patched 1,072 security bugs across Chrome 149 and 150, both released in June, exceeding the 1,036 bugs fixed across the previous 23 versions released over the past two years combined. The company credits its use of internal AI tools, particularly models like Gemini, for the acceleration.
Why it matters
Doug Turner, Chrome's director of engineering, stated that LLMs have "fundamentally shifted the economics of cybersecurity, transforming vulnerability discovery into an automated, industrial-scale operation." This represents a shift in how tech companies defend against threats—defenders now use AI to keep pace with AI-powered attackers. Microsoft similarly reported a record 570 security patches in its monthly cycle this month, citing AI as the driver.
What to watch
The trend is not uniform across the industry. Apple, by contrast, has patched 482 bugs in 2026, roughly on pace with 2015 levels and last year's total—no sign of the exponential jump seen at Google and Microsoft. The disparity suggests different AI adoption strategies among major vendors.
Summaries like this, in your inbox every morning.
Google's announcement reflects a fundamental shift in the cybersecurity landscape, one predicted by experts since the rise of large language models. For years, security researchers warned that AI systems would dramatically accelerate vulnerability discovery, forcing defenders to adopt the same technology or fall behind. Google's data now confirms this prediction: the jump from 1,036 bugs over 23 months to 1,072 in a single month demonstrates the scale of the change.
The comparison across vendors is instructive. Microsoft's separate announcement of a record 570 patches in a single monthly cycle corroborates Google's finding and suggests the trend is real and industry-wide. Yet Apple's steady pace—482 fixes in 2026, comparable to 2015 and 2024 levels—indicates that adoption of AI-powered bug detection is not universal. This divergence may reflect different engineering priorities, different existing vulnerability backlogs, or different timelines for integrating AI into security workflows. Doug Turner's statement that AI has transformed "vulnerability discovery into an automated, industrial-scale operation" captures the shift: what was once a labor-intensive process is becoming automated, forcing all major players to decide whether and how quickly to adopt similar tools.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
Circlia started a proof-of-concept for TASTE SIGNAL: visitors to Holland Village Cafe FUKUOKA taste cookies an…

In a webinar hosted by French Mathematical Society president Isabelle Gallagher, Fields Medal winner Hugo Dumi…

NVIDIA released Nemotron 3.5 Super VL, an open-weight model with 120 billion parameters that handles text, ima…

NVIDIA released Nemotron 3.5 Bolt 74B-A9B 24GB, an AI model for local agents that hits over 80 tokens per seco…

NVIDIA published a blog post titled "AI Security Is an Engineering Problem - How to Solve It at Every Layer of…

In the test, Haiku 5.5 on medium setting averaged scores close to Sonnet 5.5 on routine documents at about 1/1…
