Google ускоряет патчинг Chrome до двух раз в неделю: ИИ находит баги быстрее разработчиков

Two Chrome updates released by Google in June 2026 closed more security vulnerabilities than the previous 23 patches combined. Google announced a switch to a twice-weekly browser update release cycle — the reason being that AI tools find vulnerabilities faster than the traditional pipeline can close them, reports Wired.

Why AI Changed the Pace of Vulnerability Discovery

Google uses several AI tools for automated security analysis of Chrome. Big Sleep (formerly Project Naptime) is an agent based on large language models that independently analyzes code, builds hypotheses about potential vulnerabilities, and verifies them without engineer involvement. According to Google, the tool has already discovered real zero-day vulnerabilities in popular open-source libraries. OSS-Fuzz with AI enhancements generates millions of test scenarios to identify buffer overflows, memory access errors, and logic failures.

Before the widespread use of AI, finding serious vulnerabilities took specialists weeks, sometimes months. Now, according to Wired, the speed of problem discovery significantly exceeds the speed of their public remediation: tools work continuously, without weekends or workday limitations.

Chrome holds approximately 65% of the global browser market — making it the primary target for attacks, and an unpatched vulnerability in it a potential threat to billions of users. That is why Google cannot afford to accumulate a queue of known but unfixed bugs.

How the Chrome Update Schedule Changed

When AI began finding vulnerabilities faster than the previous cycle allowed patches to be released, the accumulation of unresolved issues became unacceptable. The company restructured its production pipeline: Chrome now updates twice a week.

Key facts according to Wired:

• Two updates in June 2026 closed more vulnerabilities than the previous 23 patches combined
• The new rhythm — updates twice a week instead of the previous cycle
• Google describes the current schedule as a temporary measure: the headline of the original Wired article contains the qualifier "for now"
• Final verification and release of each update is still carried out by humans

According to

Wired, the company itself notes the temporary nature of the current pace — the twice-weekly rhythm may be surpassed as AI tools continue to accelerate.

AI automates reconnaissance and assists with patch generation, but final human verification remains a mandatory stage. This is what sets the current ceiling on release speed.

What This Means

AI is overturning the traditional browser security cycle: frequent updates now signal not instability, but process maturity. Google is the first among major products to demonstrate that the speed of AI-assisted vulnerability discovery has outpaced the capabilities of previous production processes — and sets a new standard for the industry. Other major platforms will face the same pressure when their own AI tools reach comparable performance.

Frequently Asked Questions

Why did Google switch to twice-weekly Chrome updates?

Google's AI tools find vulnerabilities faster than the previous production cycle allowed patches to be released. To avoid accumulating a queue of known but unfixed problems, the company accelerated the schedule to two updates per week. The current pace is described as a temporary measure — further acceleration is not ruled out.

How much more significant were the two

June patches compared to the previous 23 updates?

Two Chrome updates in June 2026 together closed more security vulnerabilities than the previous 23 updates combined — according to data cited by Wired. This is a direct consequence of AI-assisted search: Big Sleep and OSS-Fuzz discover problems at a fundamentally different speed compared to manual analysis.