Chrome says two milestones fixed 1072 security bugs, more than the prior 23 combined

Sources: primary, discussion
Summary: Google states that Chrome 149 and 150 together fixed 1072 security bugs, surpassing the total across the prior 23 milestones combined. The post reports that in May the CI-integrated BigSleep and CodeMender blocked over 20 vulnerabilities from reaching production, including one rated critical S1+. Google states it is in the process of transitioning to a two-week cadence for major Chrome milestones with weekly security updates, and separately describes a pilot of two security releases per week.
Why it matters: The post is a primary-source measurement of what AI-assisted bug finding does to a large C++ codebase, and the release changes that follow it alter patch planning for managed fleets.
Follow-up: Track whether the twice-weekly security release pilot becomes the standing cadence.