Breaking

Google Introduces Gemini 3.8 Flash Cyber to Find Vulnerabilities and Generate Patches

September 2, 2026 at 16:39 EDT

Foundation Models
Security
AI Agents

Google has launched Gemini 3.8 Flash Cyber, a specialized cybersecurity model built to autonomously discover software vulnerabilities and generate working patches, while limiting access to vetted defenders through a new Fairwind Program.

Sep 2, 2026 · Google

A cyber model that finds flaws and writes the fix

Gemini 3.8 Flash Cyber is built to discover software vulnerabilities and generate patches. Access is limited to vetted defenders in the Fairwind Program, not the public API.

86.2%

CyberGym Pass@1 for vulnerability discovery

71%

Internal discovery across 20 languages

47.2%

CWE-Bench Pass@1 for automated patches

2.6x

More correct Chrome patches vs larger models

Real-world vulnerability discovery

Pass@1 on Google's internal test spanning 20 programming languages. Column height is proportional to each score.

46.6%

3.5 Flash Cyber

58.9%

3.7 Flash

71.0%

3.8 Flash Cyber

Chrome patching: 2.6x more correct fixes

Chrome Security compared Flash Cyber with much larger commercial models. Five blocks vs thirteen blocks shows the 2.6x gap.

Larger commercial models

2.6x

Gemini 3.8 Flash Cyber

How Fairwind is meant to work

Discover

Scan code for hidden vulnerabilities

→

Verify

Confirm findings inside a secure cloud

→

Patch

Generate validated, deployable fixes

What defenders highlight

Wiz reported higher recall at 2.3–5.2x lower cost. Google's cloud team found a critical flaw in under two hours. Partners say Flash-class pricing makes first-pass review newly affordable.

Limits still in view

CWE-Bench Pass@1 is 47.2%, so most first-try patches still miss. The cyber variant is not public, and its more permissive mitigations are why Google is restricting it to Fairwind.

Continue reading

The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.