Chrome 浏览器安全团队在最新报告中指出，今年六月的两次主要版本更新共修复了 1,072 个安全漏洞，超过此前 23 次大版本更新的修补总和。这一激增主要源于团队内部大幅引入 AI 工具进行漏洞发现、分类与补丁开发，Chrome 副总裁 Parisa Tabriz 表示，2025 年是攻防两端的真正转折点。

面对 AI 驱动的漏洞发现浪潮，Chrome 正从每两周一次主要版本发布加每周安全更新，转向试行每周两次安全修补的节奏。工程总监 Doug Turner 表示，AI 模型已被训练掌握 Chrome 历史上所有已知安全漏洞（CVE）及每一行程式码的变更原因，使其能精准定位庞大程式码库中的潜在弱点，包括已不再积极维护的功能模组。

除了持续修补漏洞外，Chrome 安全团队同样致力于结构性安全改进，例如将部分 C++ 程式码改用记忆体安全的 Rust 语言重写，以从根本上消除整类常见漏洞。Tabriz 认为短期漏洞激增后将达到新的平衡，但她强调安全改善不会自动发生，业界必须积极将 AI 融入软体安全开发流程。

Google's Chrome security team reported that the browser's two major June releases included fixes for 1,072 security bugs—more than the combined total of the previous 23 major releases. This dramatic surge has been largely driven by the team's rapidly evolving use of AI tools for vulnerability discovery, triage, and patch development, marking what Chrome VP Parisa Tabriz calls a true inflection point for both offensive and defensive security.

In response to the flood of AI-discovered vulnerabilities, Chrome is piloting twice-weekly security update releases, up from its already accelerated cadence of biweekly major releases with weekly security patches. Director of Engineering Doug Turner explained that AI models have been trained on every known CVE and the complete history of Chromium's codebase, enabling them to pinpoint potential weaknesses across the vast project—including in legacy features that no longer receive active human scrutiny.

Beyond reactive patching, the Chrome security team is pursuing structural improvements such as rewriting portions of C++ code in the memory-safe language Rust to eliminate entire categories of common vulnerabilities. Tabriz anticipates a new equilibrium will emerge after the current spike but cautions that improved security will not come automatically—the entire industry must actively integrate AI into software security development workflows.