Inside Google’s faster Chrome patch strategy to block AI attacks on your browser

Google moves Chrome to a 2-week update cycle to narrow the patch gap. The change comes in response to AI-enabled malicious actors and “fast-moving threats.” Google is mulling ways to dynamically patch Chrome without requiring a browser relaunch. As a recent wave of unintended, agentic AI-enabled attacks has shown, the dawn of a new, perilous era in cybersecurity is now upon us. The latest large language models from various AI frontier companies (OpenAI, Anthropic, etc.) have been shown to possess extremely potent cyber capabilities — valuable to both threat actors and the cybersecurity experts charged with defending against them. Among those cyber capabilities is the ability to discover and exploit the same sort of vulnerabilities within hours or days that previously required weeks or months of a threat actor’s time. Even worse: To the extent that a social engineering step is part of a threat actor’s attack workflow, agentic AI can now be harnessed to scale a particularly pernicious and highly personalized form of phishing known as spearphishing. Before highly cybercapable agentic AI became available and affordable to threat actors, spearphishing was often viewed as too resource-intensive for most malicious endeavors. Not anymore. (Disclosure: Ziff Davis, ZDNET’s parent company, filed…