Google Tests Twice-Weekly Chrome Security Updates as AI Finds More Vulnerabilities

Google is experimenting with twice-weekly Chrome security updates to keep up with the rapid discovery of vulnerabilities through AI-powered tools. The security team is using large language models to improve vulnerability detection, triage, and patch development, aiming to reduce the time between finding a flaw and protecting users.

In trials, AI tools discovered a vulnerability hidden in Chrome for over 13 years that could have allowed an attacker to access local files on a user's machine via a sandbox escape flaw. While AI tools aren't replacing traditional security methods, they add an extra layer of protection alongside techniques like fuzzing and external vulnerability research.

The rapid release schedule is challenging because patches must be installed, and Google is exploring dynamic patching to replace updated components without a full restart. Another hurdle is businesses balancing faster security protection with the need to test updates before deployment. Google's move demonstrates how AI is reshaping software security, as discovering vulnerabilities is increasingly the easier part, while delivering fixes in a timely manner is becoming just as critical.