Google Launches Gemini 3.8 Flash Cyber for Vulnerability Detection

On September 2, 2026, Google announced the release of Gemini 3.8 Flash and its cybersecurity variant, Gemini 3.8 Flash Cyber. The latter is designed for discovering and patching software vulnerabilities, achieving a 2.6x improvement in patch accuracy for Chrome security bugs. The Flash Cyber model is restricted to trusted testers and governments, as per compliance with the EU AI Act. It shows frontier-level performance, scoring 86.2% on the CyberGym benchmark and 47.2% on CWE-Bench for patching. The introductory pricing for both models is $0.75 per million input tokens and $3.75 per million output tokens until the end of the year. This release marks Google's third Flash model in six weeks, following the launch of Gemini 3.7 Flash. The models are built on advanced reasoning and coding capabilities, with Flash Cyber specifically trained in cybersecurity tasks. The release raises compliance obligations under the EU AI Act, which mandates documentation and risk assessments for general-purpose AI models.

Key Points: • Gemini 3.8 Flash Cyber is designed for automated vulnerability detection and patching. • The model is available only to trusted testers and governments due to compliance with EU regulations. • It achieved significant performance improvements, including a 2.6x increase in patch accuracy for Chrome.