Google’s AI ‘Big Sleep’ Finds 5 New Vulnerabilities in Apple’s Safari WebKit

Google’s AI cybersecurity agent Big Sleep has been credited by Apple with identifying up to five security flaws in the WebKit component used by Safari, potential triggers for browser crashes or memory corruption. The vulnerabilities are CVE-2025-43429, CVE-2025-43430, CVE-2025-43431 and CVE-2025-43433, and CVE-2025-43434, with the first and the memory-corruption ones cited as arising from processing malicious web content.

According to Apple, patches were released on Monday as part of updates across iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, watchOS 26.1, visionOS 26.1, and Safari 26.1. Big Sleep, previously known as Project Naptime, was launched by Google last year in collaboration with DeepMind and Google Project Zero to automate vulnerability discovery.

Earlier this year, Google also indicated that its LLМ-assisted framework identified a flaw in SQLite (CVE-2025-6965, CVSS 7.2) as being at “risk of being exploited.” While none of Monday’s vulnerabilities have been flagged as exploited in the wild, users are advised to keep devices updated to the latest versions for protection.