Google Launches Gemini 3.8 Flash Cyber for Autonomous Vulnerability Discovery

Google introduced the Gemini 3.8 model family, including Gemini 3.8 Flash for general software-engineering work and Gemini 3.8 Flash Cyber for identifying exploitable vulnerabilities and generating patches. Access to the cyber-focused model is limited to vetted security teams through Google’s Fairwind Program because of its advanced offensive and defensive capabilities.

Google reported that Gemini 3.8 Flash Cyber exceeded 70% success on an internal vulnerability benchmark spanning 20 programming languages and achieved a 47.2% pass@1 score on CWE-Bench. The company is using the model internally to secure its own codebases; its Cloud Vulnerability Research team reportedly identified a critical foundational vulnerability in less than two hours with the model’s assistance.