Anthropic · AI Agent · Google · Decrypt
Google Rolled out an AI That Hunts Its Own Security Bugs
Compiled by KHAO Editorial — aggregated from 1 source. See llms.txt for citation guidance.
★ Tier-1 Source
Google gave one of its AI agents a new job: breaking into Google.
Key facts
- In August, more than 100 organizations, including Google, Microsoft, and Anthropic, signed an open letter warning that AI-enabled cyberattacks are becoming more common, after AI agents from OpenAI
- The company disclosed on September 24 that its Product Security team built an autonomous system called PageBreak, designed to hunt for real, exploitable vulnerabilities in Google's own web
- PageBreak has already uncovered more than 500 XSS vulnerabilities across Google's first-party web applications, the kind of flaw that can let an attacker hijack a logged-in session, steal data
- Google gave one of its AI agents a new job: breaking into Google
Summary
Google disclosed PageBreak, an internal AI agent from its Product Security team that has found more than 500 bugs. Unlike typical AI scanners, PageBreak only reports a bug after confirming it with a working exploit against a live environment, giving it a near-zero false-positive rate. Google plans to pair PageBreak with CodeMender, its automated bug-fixing agent. The company disclosed on September 24 that its Product Security team built an autonomous system called PageBreak, designed to hunt for real, exploitable vulnerabilities in Google's own web applications, according to a blog post by information security engineer Michał Bentkowski.