Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities

Summary: Google DeepMind announced Gemini 3.5 Flash Cyber, a specialized model built on 3.5 Flash that discovers, validates, and patches vulnerabilities, available only to governments and trusted partners through the CodeMender agent in a limited-access pilot. In testing on the V8 JavaScript Engine, it found 55 unique confirmed issues versus 47 for Gemini 3.5 Flash and 36 for Anthropic's Claude Opus 4.6, including 10 issues no other model caught, and it produced a 100% reliable remote-code execution exploit that bypassed ASLR and W^X mitigations.
What you should know: A model that finds more confirmed vulnerabilities than Claude Opus 4.6 and can build a working exploit that defeats ASLR and W^X is being kept to governments and trusted partners for now, but Google says access will expand over time - so the same capability will not stay behind a pilot gate indefinitely.

Read the original at The Hacker News ↗

Topics: AI Security
Related: SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 8 Cyber Risks · Nov 15, 2026
Pentagon Renames CDAO ‘Super Intelligence Office’ Cyber Risks · Nov 15, 2026
186 Fake AI Domains Redirect Users to Click Fix Lures, Browser Malware, and Search Hijackers Cyber Risks · Nov 12, 2026