GoKawiilGoogle's PageBreak AI agent uncovers over 500 XSS flaws in its own web apps
Google's Product Security team disclosed in a blog post that its internal AI agent, PageBreak, has found more than 500 cross-site scripting vulnerabilities across the company's web applications. The tool, piloted last November and made a full product in January, combines AI analysis with validation to flag exploitable bugs, including a cache poisoning issue on apis.google.com, an XSS flaw on admin.google.com, and insecure handshakes in browser extensions, all of which have reportedly been fixed.