Archive · 24 Jul 2026
Google's AI for Cyber-Warfare Restricted to Governments
Google has created a special AI called Gemini 3.5 Flash Cyber that can find security problems in computer code, create proofs to show these problems are real, and even fix them.
This AI is very powerful and can do its work in just a few hours.
Google has decided that only governments and trusted partners can use this AI because it can also create ways to exploit these security problems.
This means that the AI can be used both to protect and to attack, so Google wants to make sure it is used responsibly.
The AI was released along with two other general-purpose models, but this one is special because it is designed for cybersecurity work.
Google believes that by restricting access, they can help protect important systems and prevent bad actors from using the AI for harmful purposes.
Google's Gemini 3.5 Flash Cyber AI can find and exploit security vulnerabilities autonomously.
The AI is restricted to governments and trusted partners to prevent misuse.
It outperforms other models in finding and validating security issues.
The AI can generate working exploits to verify vulnerabilities.
Google aims to enhance cybersecurity defenses by limiting access to the AI.
- Who
- Google DeepMind
- What
- Developed an AI model for cybersecurity with exploit-generation capabilities
- When
- Released on July 21
- Where
- Global
- Why
- To enhance cybersecurity defenses and prevent misuse of exploit-generation capabilities
Government Access
Public Access
Access Restrictions
Government Access
Google restricts access to governments and trusted partners to prevent misuse of exploit-generation capabilities.
Public Access
Some argue that restricting access limits the ability of private sector organizations to defend against cyber threats effectively.
- Release Date
- July 21
- Model Name
- Gemini 3.5 Flash Cyber
- Primary Use
- Cybersecurity
- Access Restriction
- Governments and trusted partners
- Performance Comparison
- Found 55 unique security issues in Chrome vulnerability pipeline