Google debuts Gemini 3.8 Flash Cyber for autonomous vulnerability discovery
The security-tuned model found and patched more flaws than larger commercial models at a fraction of the cost, according to early testing by Google and Wiz.
Google announced Gemini 3.8 Flash Cyber (replacing 3.5) for trusted testers — via a new Fairwind Program — with “frontier-level performance in autonomous vulnerability discovery.”
The Chrome Security team found that 3.8 Flash Cyber produced 2.6 times more correct patches to vulnerabilities in Chrome than the best commercial models that are much larger.
Wiz found that Gemini 3.8 Flash Cyber achieves +7.5-9.7% higher recall on their internal penetration testing benchmark for a 2.3-5.2x lower cost compared to other leading frontier models.
Google’s Cloud Vulnerability Research team leveraged the 3.8 Flash Cyber model to find a critical foundational vulnerability in less than 2 hours, a vulnerability for which research and discovery usually takes months.
Google also announced the rollout of Gemini 3.8 Flash, marking the third Flash update in three months.
Gemini 3.8 Flash “delivers substantial gains” over its predecessor in various benchmarks, with Google also noting how it is “often approaching the performance of higher-cost frontier models.”
Gemini 3.8 Flash is already live in the Gemini app for Google AI Pro and Ultra subscribers, AI Mode, and Gemini in Google Sheets. It’s also available for developers in Google Antigravity, AI Studio, and the Gemini API. (Abner Li / 9t5Google)
Related: Google, SiliconANGLE, VentureBeat, Implicator.ai, The Deep View, NewsCord, Thurrott, Cyber Security News, Hacker News, r/singularity, The Verge, The Register, Ars Technica, Artificial Analysis, iClarified, Android Authority, RuntimeWire, Search Engine Land, Forkast, The New Stack, 9to5Google, Forkast, Unite.AI, BeInCrypto, Wall Street Journal, Android Headlines, TechRadar, The420CyberNews, Cyber Security News, Search Engine Journal, Ars Technica, Google, SammyGuru, Quartz, Neowin, CNBC Television on YouTube, Blockchain.News, NPowerUser, Business Insider, WebProNews, Digital Journal
Metacurity is the cybersecurity news, analysis, and insight you'd need hours and possibly days to assemble yourself.
Every weekday, we read the releases, filings, court documents, and reports that vendors and PR teams often don't want summarized — then tell you what actually changed and why it matters. Minimum vendor marketing, no outrage bait, no SEO filler.
A paid subscription to Metacurity delivers
- Full archive access — every newsletter and AI Watch roundup, searchable and browsable.
- Our weekly curated long-reads roundup — the best cybersecurity writing from across the industry, filtered and vetted so you're not sorting through it yourself,
- Periodic specialized reports and analyses — deep dives that go beyond our daily coverage
- Support for independent, no-spin cybersecurity journalism — funded by readers, not vendors or investors.
Reader support is what keeps Metacurity independent. It allows us to focus on serving the cybersecurity community—not advertisers, vendors, or investors—and to continue delivering the thoughtful analysis you've come to rely on every weekday.
Please consider supporting us. And thank you!
