Google Accelerates Chrome Updates to Outrun Fast-Moving AI Hackers

Google has initiated more frequent Chrome browser updates, moving from a four-week cycle to a two-week schedule, according to a Tuesday (Sept. 8) blog post. The company initiated this shift with the launch of Chrome 153 for Desktop, Android, and iOS on Tuesday, with the planned release of Chrome 154 on Sept. 22, as per the post.

This move aligns with Google's established predictable release cadence from 2010 and the previous four-week cycle from 2021, as cited in the post. Google's Senior Technical Program Manager Ben Mason and Distinguished Engineer and Senior Director Deepak Ravichandran commented on the new timeline, stating that it sets a new standard for browser delivery and security, with many in the web ecosystem following suit, including Microsoft, Mozilla, and Brave.

More frequent browser updates provide developers with tighter deployment windows, quicker interoperability updates, and swifter safety improvements for users. This approach also benefits users by offering more frequent feature updates and faster security fixes. Google highlights that automated AI discovery tools and community bug reports are generating a higher rate of patches, enabling shorter release cycles to manage security fixes more efficiently.

By minimizing the time between fixing public code and delivering it to end users, Google aims to keep the 'N-day' patch gap as small as possible, thus protecting against fast-moving threats, as mentioned in a July 30 blog post. Google had announced the two-week release cycle shift on Sept. 8, stating that more frequent yet smaller updates would minimize disruption and simplify debugging.

In July 30, Google revealed plans to pilot a shift to two security releases per week to stay ahead of attackers. Apple also accelerated its security updates in response to AI's rapid development of malicious hacking tools, as reported by Google in its Sept. 8 blog post.