AI Finds 1,072 Chrome Bugs in 60 Days, Outpacing Human Security Teams
Updated
Updated · ZDNet · Aug 4
AI Finds 1,072 Chrome Bugs in 60 Days, Outpacing Human Security Teams
3 articles · Updated · ZDNet · Aug 4
Summary
AI-driven bug hunting is flooding security teams with more vulnerabilities than they can triage or patch, turning discovery speed into an operational bottleneck rather than a pure defensive gain.
Google fixed 1,072 Chrome bugs in 60 days, Microsoft shipped a record 570 patches in July including three zero-days, and Apple capped researcher submissions after being overwhelmed in June.
That surge is forcing constant patching across Windows, macOS and Linux, where 432 kernel CVEs were reported in two days and the mean time to exploit has fallen from 63 days to minus 7 days.
AI is not yet a clean fix: one study of 20,000-plus issues found LLMs introduced nearly 9 times more new vulnerabilities than developers, while even specialized tools such as PatchitPy repair only about 80% successfully.
The article argues companies need stricter triage, better deduplication and exploitability scoring, and more staffing and budget because the problem is now ecosystem-wide, not just an open-source issue.
If AI finds bugs faster than humans can patch them, are we automating our way into a catastrophic security collapse?
With AI agents autonomously chaining exploits, how long until machine-speed attacks completely bypass human-driven enterprise defenses?
1,072 Bugs Fixed: Inside Chrome’s AI-Powered Security Revolution and Its Ripple Across the Software Industry
Overview
In June 2026, Google Chrome set a new security record by patching over 1,000 bugs in just two versions, thanks to a major shift to AI-powered vulnerability detection. By deploying advanced AI agents across the Chrome codebase, Google uncovered deep-rooted flaws, including a critical sandbox escape hidden for 13 years. This AI-driven approach not only accelerated bug discovery but also automated triage and patching, saving developers significant time. To keep users safe, Google sped up its release cycle and introduced dynamic patching, while also moving toward memory-safe languages like Rust to eliminate entire classes of vulnerabilities. These innovations are now influencing the entire software industry, as other tech giants adopt similar AI-driven security workflows.