Google’s PageBreak finds over 500 XSS flaws in its web apps

Google has disclosed that its PageBreak AI security agent has found over 500 cross-site scripting vulnerabilities across the company’s web applications. The Google Product Security team said PageBreak began as a pilot in November 2025 and became a formal project…