Google is doubling Chrome's patching frequency after AI-assisted vulnerability discovery identified more bugs in two June updates than in the previous 23 releases combined.
Google Chrome's security update schedule is accelerating. The search giant announced it will now patch the browser twice per week instead of its previous cadence, driven by increased bug detection from artificial intelligence tools.
The shift reflects a dramatic surge in vulnerability discoveries. In June alone, two Chrome updates addressed more security issues than the previous 23 updates had combined. This acceleration stems from Google's deployment of AI systems to hunt for bugs before attackers can exploit them.
The browser maker has been investing heavily in AI-powered security research. These tools analyze code patterns and identify potential vulnerabilities at scale, finding issues that might slip past traditional manual review processes. The effectiveness is evident in the volume of patches now required.
Twice-weekly updates present both benefits and challenges. On the security side, faster patching cycles reduce the window of exposure for newly discovered vulnerabilities. This is particularly important for Chrome's massive user base—over 3 billion installations worldwide.
However, more frequent updates require users to install patches regularly. Chrome typically applies updates automatically in the background, minimizing disruption, but the increased frequency could impact systems with strict update policies or limited bandwidth.
Google joins other tech companies leveraging AI for security research. Microsoft and Apple have similarly invested in automated vulnerability detection. The trend reflects industry recognition that traditional security processes cannot keep pace with the volume of code requiring analysis.
The company has not specified whether the twice-weekly schedule will be permanent or adjusted based on vulnerability discovery rates. It also remains unclear whether all Chrome channels—stable, beta, and dev—will follow the same patching frequency.
For users, the takeaway is simple: keep automatic updates enabled. The accelerated patching cycle provides stronger protection against emerging threats, but only if devices receive the latest versions promptly.
Cyberattacks against hedge funds and private equity firms have been attributed to UNC6671, an extortion group connected to the BlackFile threat actors. The campaign represents an escalating threat to the financial sector.
A Go-based malware distributed through ClickFix attacks is targeting macOS users to steal cryptocurrency, passwords, and Apple Keychain data. The infostealer campaign combines social engineering with credential harvesting.
A former NSA official has warned against connecting water infrastructure controllers to the internet following suspected Iranian cyberattacks on U.S. water systems.
Security researchers scanning Polish government websites discovered critical vulnerabilities that could expose courts, hospitals, and airports to cyberattacks. The vulnerabilities stem from common software used to manage and display web content.