Google Speeds Up Chrome Patching to Twice a Week: AI Is Finding Bugs Faster Than Developers Can Fix Them

Two Chrome updates that Google released in June 2026 closed more security vulnerabilities than the previous 23 patches combined. Google has announced a switch to a twice-weekly browser update cycle. The reason: AI tools are finding vulnerabilities faster than the traditional pipeline can close them, Wired reports.

Why AI changed the pace of vulnerability discovery

Google uses several AI tools to analyze Chrome's security automatically. Big Sleep (formerly Project Naptime) is an agent built on large language models. It analyzes code on its own, forms hypotheses about potential vulnerabilities, and tests them without an engineer's involvement. According to Google, the tool has already found real zero-day vulnerabilities in popular open-source libraries. OSS-Fuzz, enhanced with AI, generates millions of test scenarios to catch buffer overflows, memory-access errors, and logic failures.

Before AI was widely adopted, finding serious vulnerabilities took specialists weeks, sometimes months. Now, according to Wired, the rate at which problems are discovered far exceeds the rate at which they are fixed publicly: the tools run continuously, with no weekends and no working-day limits.

Chrome holds about 65% of the global browser market. That makes it a prime target for attacks, and an unpatched vulnerability in it a potential threat to billions of users. This is why Google cannot afford to let a queue of known but unfixed bugs build up.

How the Chrome update schedule has changed

Once AI began finding vulnerabilities faster than the old cycle could ship patches, a growing backlog of unresolved issues became unacceptable. The company reworked its production pipeline, and Chrome now updates twice a week.

Key facts, according to Wired:

• Two updates in June 2026 closed more vulnerabilities than the previous 23 patches combined
• The new rhythm is two updates a week, instead of the previous cycle
• Google describes the current schedule as a temporary measure: the headline of the original Wired article includes the qualifier "for now"
• Humans still carry out the final verification and release of each update

According to

Wired, the company itself notes that the current pace is temporary: the twice-weekly rhythm may be surpassed as AI tools accelerate further.

AI automates reconnaissance and helps generate patches, but a final human review remains a mandatory step. That step sets the current ceiling on release speed.

What this means

AI is upending the traditional browser-security cycle: frequent updates now signal mature processes, not instability. Google is the first major vendor to show that the speed of AI-assisted vulnerability discovery has outpaced the capacity of its previous production processes, and it is setting a new standard for the industry. Other major platforms will face the same pressure once their own AI tools reach comparable performance.

Frequently asked questions

Why did Google switch to Chrome updates twice a week?

Google's AI tools find vulnerabilities faster than the previous production cycle could ship patches. To avoid building up a queue of known but unfixed issues, the company sped up its schedule to two updates a week. The current pace is described as a temporary measure, and further acceleration is not ruled out.

How much more significant were the two

June patches than the previous 23 updates?

Two Chrome updates in June 2026 together closed more security vulnerabilities than the previous 23 updates combined, according to Wired. This is a direct result of AI-assisted discovery: Big Sleep and OSS-Fuzz uncover problems at a fundamentally different speed than manual analysis.