Google Chrome AI patches 1,072 bugs in just two releases

Google's Chrome Security team has successfully integrated AI to enhance vulnerability detection and patching, fixing 1,072 security bugs in just two releases—surpassing the total from the previous 23 releases combined. The AI system not only identifies vulnerabilities but also automates the triaging process, saving developers significant time. A paradigm shift in their repair pipeline allows for the creation of multiple candidate patches assessed by different AI agents before human review.

Additionally, measures are being taken to minimize the 'patch gap' and to handle dynamic patching without requiring full browser restarts. The long-term goal includes eliminating entire categories of bugs, such as use-after-free vulnerabilities, and shifting towards re-engineering risky components in Rust for improved safety. The recent advancements also led to increased bug reports through their external vulnerability reward program.