Project Zero: BigSleep found 45 V8 bugs in six months, beating Fuzzilli's 37
moyix · x · 2026-10-28
Google Project Zero compared BigSleep, its LLM-based bug-finding system, against the Fuzzilli fuzzer on Chrome's V8 engine. In the past six months BigSleep found 45 vulnerabilities versus Fuzzilli's 37, with only 25% overlap in reported bugs (estimated 60% theoretical overlap via dedicated experiments). A substantial share of bugs is discoverable by only one approach, so Project Zero recommends vendors run both fuzzing and agentic analysis to maximize pre-impact vulnerability discovery.
More from Safety
- Risk researcher: policy briefings still recapping what Yudkowsky argued a decade ago — davidmanheim · 2026-10-28
- Cognition CSO: AI 'promoted every attacker a league,' launching Devin Security — connoraxiotes · 2026-10-28
- TED's 10M-follower X account hacked, official channels ask users to verify via email — TEDTalks · 2026-10-28
- Study examines how LLMs could lower the bar for chemical weapons attacks — davidmanheim · 2026-10-28
- Columbia EMNLP paper: dense retrievers are systematically biased by identity signals in queries — vishalmisra · 2026-10-28
- Ex-PC repairman builds JinnexGuard with Claude Code to scan MCP servers before install — Complex-Pin-4616 · 2026-10-28