Google’s Gemini 3.5 Flash Cyber becomes a vulnerability hunter

Google announced Gemini 3.5 Flash Cyber integrated with its CodeMender agent to find, validate, and remediate software vulnerabilities at scale; during testing the model identified dozens of confirmed issues in the V8 engine and internal services, uncovered remote-code-execution and memory-corruption bugs, and produced a reliable RCE exploit that bypassed ASLR and W^X protections. Google also introduced Gemini 3.5 Flash-Lite and Gemini 3.6 Flash, with 3.6 including enhanced safety mitigations to reduce misuse while improving coding and multimodal performance.