Google's Gemini Agent Harness Fixed 1,072 Chrome Security Bugs in Two June Releases — More Than the Previous 23 Versions Combined
Google disclosed that the last two Chrome versions, both shipped in June, patched 1,072 security bugs versus 1,036 across the prior 23 releases spanning two years. An internally built Gemini-powered agent harness searches the Chrome codebase for vulnerabilities while suppressing false positives; one find was a sandbox escape that had sat in the codebase for over 13 years, letting a compromised renderer read local files. The economics matter more than the count: triage per report used to run 5-30 minutes of human time, and automating dedup, reproduction, severity assignment and routing now saves the team hundreds of developer-hours a month — a direct threat to the human-in-the-loop triage model that vulnerability-management SaaS sells.
↳ Follow the thread