AI News selected for Professionals and Decision Makers
AI Security And Privacy Updates

Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined

14:51 · July 31, 2026 · Hacker News AI Section

Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined

Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150, surpassing the total number of flaws the company fixed across the prior 23 milestones combined. Both versions were released last month. In its latest patch for Chrome 151, released Wednesday, the tech giant resolved 370 flaws, out of which 349 were reported by Google itself. Seven of the

Summary

Google has addressed a total of 1,442 security vulnerabilities across Chrome versions 149, 150, and 151. The first two releases alone accounted for 1,072 issues, exceeding the combined fixes from the preceding 23 milestones, while the 151 update resolved 370 additional flaws, seven of them rated critical. Most of the work in the latest cycle originated from internal discovery rather than external reports.

The increase stems from wider adoption of large language models that speed up code analysis and bug identification. Google used an agent harness built on its Gemini models to locate a sandbox escape flaw (CVE-2026-3545) in the Navigation component that had gone unnoticed for more than 13 years; the vulnerability could have allowed an attacker to read local files. National vulnerability statistics show a similar pattern industry-wide, with 46,872 entries recorded so far in 2026.

To keep pace with faster discovery, Google is moving from weekly security updates to a pilot of two releases per week while maintaining its two-week major-version cadence. The company is also automating the creation of release notes and CVE descriptions to shorten the interval between fix and disclosure. In parallel, it is testing dynamic patching that replaces background processes such as the renderer and GPU without a full browser restart, using Chrome’s multi-process design and platform-specific behaviors such as macOS background execution.

Longer-term efforts focus on removing entire classes of memory-safety problems. These include runtime hardening, wider use of Rust for new components, and rewriting the top-level interface in HTML, CSS, and TypeScript. Third-party dependencies are being moved to automated update pipelines. The Chrome Security Team notes that the goal is to deliver fixes faster than adversaries can exploit them while reducing the operational burden on users.

Why it matters

This article highlights how AI and LLMs are fundamentally changing the cybersecurity landscape by accelerating vulnerability discovery and exploitation. Dutch security professionals must adapt their vulnerability management strategies to handle the increased volume of AI-driven threat disclosures in ubiquitous enterprise software.

More in this beat
ai-agentschromecode-analysisCVE-2026-3545geminigooglelarge-language-modelsthreat-and-vulnerability-updates
Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities

17:09 · July 21, 2026

Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities

This article is highly relevant for Dutch security professionals as it introduces a state-of-the-art AI tool for automated vulnerability discovery and patching. Given the strict EU regulatory landscape (like NIS2 and the Cyber Resilience Act), leveraging such AI capabilities will be critical for Dutch enterprises and government bodies to proactively secure software supply chains.

Relevance 90 · Audience 95

Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs

11:07 · July 20, 2026

Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs

This article is highly relevant for security professionals as it demonstrates a real-world case of AI being weaponized to automate and manage cyberattacks. Understanding these AI-driven tactics is crucial for Dutch enterprises to update their threat models and develop countermeasures against highly adaptable, AI-assisted threat actors.

Relevance 85 · Audience 95

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More

19:23 · August 20, 2026

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More

The article provides crucial updates on privacy-enhancing technologies for AI that are vital for GDPR compliance in the Netherlands. It also alerts security professionals to emerging AI-driven threats, such as uncensored LLMs and AI models capable of autonomous vulnerability exploitation, which require immediate defensive consideration.

Relevance 85 · Audience 95

Phishing 3.0: The Fight Moves to Agent Versus Agent

13:30 · August 19, 2026

Phishing 3.0: The Fight Moves to Agent Versus Agent

This article is highly relevant for security professionals as it highlights the emerging threat of AI-driven phishing agents. Dutch enterprises must adapt their cybersecurity strategies to counter AI-generated attacks, making this crucial for maintaining robust organizational security.

Relevance 85 · Audience 95

Don't Want Your LLM to Recommend Nuclear Strike? Try Asking It in Japanese

06:00 · August 15, 2026

Don't Want Your LLM to Recommend Nuclear Strike? Try Asking It in Japanese

This study is highly relevant for Dutch AI researchers and policymakers focused on ethical AI and EU AI Act compliance, as it demonstrates that safety guardrails can behave unpredictably across different languages. It underscores the necessity for multilingual safety evaluations, which is critical for Dutch enterprises deploying LLMs.

Relevance 85 · Audience 95

Building an open Agentic Internet: readable, discoverable, callable, and payable

15:00 · August 6, 2026

Building an open Agentic Internet: readable, discoverable, callable, and payable

This article is highly relevant for security and privacy professionals as it introduces new cryptographic standards (Web Bot Auth, PACT) for authenticating and managing AI bot traffic. It provides actionable solutions for Dutch enterprises to protect their domains from unauthorized scraping while aligning with EU data protection and copyright directives.

Relevance 85 · Audience 90

Introducing Kitesurf: The agent-first browser that runs in V8 isolates on Cloudflare Workers

15:00 · August 6, 2026

Introducing Kitesurf: The agent-first browser that runs in V8 isolates on Cloudflare Workers

Kitesurf introduces a secure-by-design, isolated browsing environment for AI agents, addressing the critical security risks of autonomous web interaction. For Dutch security professionals, it offers a scalable, stateless architecture that aligns with strict EU data protection and security standards for enterprise AI deployments.

Relevance 85 · Audience 80

AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory

13:30 · August 6, 2026

AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory

Directly addresses AI security risks from prompt injection and memory poisoning with actionable guidance for professionals. Applicable to Dutch/EU teams using commercial AI tools, aligning with GDPR and AI Act compliance needs. Provides concrete detection patterns and policy recommendations.

Relevance 85 · Audience 90