Chrome adopts a two-week update cycle in the face of the new AI-shaped security landscape

Google has begun shipping Chrome on a two-week cadence instead of the four weeks that had been standard until now, a change the company had previously announced and that took effect with the release of Chrome 153 on desktop, iOS and Android. The decision is a direct response to how artificial intelligence is transforming the computer security landscape.

According to Google, both automated AI tools and reports from the researcher community have driven up the volume of patches and updates the browser needs to process. A shorter release cycle makes it easier to handle that increase in security fixes. But there is an even more pressing reason: threats are evolving faster, partly thanks to AI itself, which makes it critical to reduce the time between a fix being merged into the public code and its actually reaching users. In practice, this means shortening what is known as the "N-day patch gap": the window between a vulnerability becoming public and the moment it is patched. The narrower that window, the less time attackers have to exploit known flaws.

The change is not only defensively motivated. More frequent releases also allow Chrome to add new features faster, something Google considers key in the AI era. AI-assisted software development has made it cheaper and quicker for alternative browsers to appear and compete directly for Chrome's market share. The article notes that ChatGPT Atlas, OpenAI's browser, has already been shut down, but several competitors remain active, among them Brave, Dia, Opera Neon, Perplexity's Comet and DuckDuckGo's browser. Faced with that competitive pressure, Google is also experimenting with adding more AI features inside Chrome and iterating on them quickly, which requires precisely this faster release pace.

Because Chrome is the world's most widely used browser, this shift in cadence has implications beyond Google: by setting the pace, it pushes the entire sector to move faster. In fact, according to the article, Mozilla, Microsoft and Brave have already begun adopting a two-week update schedule as well, following Chrome's lead.

This is not the first time Chrome has adjusted its release pace to improve patch management: the company had already moved from a six-week cycle to a four-week one in 2021, after establishing its "release early, release often" philosophy more than a decade earlier. The new jump to two weeks confirms that this logic of constant iteration is now intensifying under the combined pressure of faster-moving security threats and browser competition that is reinventing itself with the help of AI itself.