Reported by 2 outlets
Google PageBreak AI Agent Finds Over 500 XSS Vulnerabilities Across Its Web Applications
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 0.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.46 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Analysis
Google's internal PageBreak agent found and validated more than 500 XSS bugs across first-party web apps, including sensitive domains. The shift from triage to agentic, exploit-backed testing produced real findings rather than noise. It highlights how AI agents are now doing the work of human red teams at scale, and why that same capability can be turned outward by attackers. Watch whether exploit-backed AI scanning becomes a standard attacker capability.
Timeline
-
original reporting
Google PageBreak AI Agent Finds Over 500 XSS Vulnerabilities Across Its Web Applications
gbhackers.com · 9d ago · October 5th, 2026
Google has disclosed that PageBreak, an internal AI security agent developed by its Product Security team, has identified and validated more than 500 cross-site scripting (XSS) vulnerabilities across the company’s first-party web applications, including sensitive domains. The initiative highlights a shift from AI-assisted vulnerability triage to agentic testing that produces exploit-backed findings rather than noisy […] The post Google PageBreak AI Agent Finds Over 500 XSS Vulnerabilities Across Its Web Applications appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .