What happened
Google says its internal AI tools helped it patch more security flaws in Chrome in a single month than in the previous two years combined. According to a report from TechCrunch, the company fixed 1,072 security bugs across the last two versions of Chrome, both released in June. That figure is higher than the 1,036 fixes made across the previous 23 versions released over roughly two years.
For context, TechCrunch notes that Chrome 126 shipped in June 2024, while the two latest releases, Chrome 149 and 150, arrived last month. Google refers to each version as a "milestone". The data came from a white paper on the company's work using AI to find and fix flaws faster, which included a chart showing a sharp rise in patches over time.
Why it matters
Doug Turner, Chrome's director of engineering, told TechCrunch that large language models have "fundamentally shifted the economics of cybersecurity, transforming vulnerability discovery into an automated, industrial-scale operation." He added: "By applying models like Gemini, we are preemptively fixing vulnerabilities, outpacing our adversaries and making Chrome safer with every update."
For businesses, the browser is often the front door to sensitive work — email, banking portals, internal dashboards and customer data. When a vendor finds and fixes flaws before attackers can use them, the window of risk shrinks. The report also frames this as confirmation of a long-standing warning: security experts predicted that AI systems would find bugs at an enormous scale, forcing defenders to use AI too. As the piece puts it, that prediction "is starting to become true, and it's backed by real data."
Google is not alone. TechCrunch reports that Microsoft recently patched a record 570 security flaws in a single Patch Tuesday and credited its own use of AI. Apple, by contrast, does not appear to be seeing the same jump: an independent count cited in the article puts Apple at 482 bugs patched in 2026, roughly in line with recent years.
A practical example for your team
Say your company runs 200 laptops, and staff live in Chrome all day. Under the old pace, a serious flaw might sit undiscovered for months before a patch existed. With AI-assisted discovery producing far more fixes per release, your practical response is simple but important:
- Turn on automatic browser updates across all devices so patches apply without waiting for staff to click.
- Set a policy that browsers must restart within 24 hours of an update being available.
- Track your patch status with a management tool so you can prove every device is current during an audit.
The lesson: more patches only protect you if you actually install them. A faster fix pace from vendors shifts the responsibility onto your team to deploy quickly.
What next
Expect more vendors to credit AI for rising patch counts, and expect security teams to face a busier update cycle. The volume of fixes may keep climbing, which makes disciplined update management more valuable than ever. It also raises a question worth watching: whether attackers use the same AI methods to find flaws just as fast.
At Brain.mt, we help organisations put AI to work safely and sensibly. Brain.mt can help you using AI for your business. Contact me for more information. I also offer dedicated workshops and training about this subject.
