ZeroHour
Help Net Securitypublished ()ingested @helpnetsecurity

Google’s Gemini 3.8 Flash takes on bigger AI models at a lower cost

infoModel releaseimportance 76
AI summary · glm-5.3-flash

Google released Gemini 3.8 Flash with a security-focused Cyber variant that produces 2.6x more correct patches and found a critical vulnerability in under two hours.

Google launched Gemini 3.8 Flash for developers and a gated Gemini 3.8 Flash Cyber model reserved for vetted security teams through the new Fairwind program. The company says the model beats most larger frontier models on the DeepSWE v1.1 engineering benchmark at lower cost, and Chrome Security reports the Cyber variant produced 2.6 times more correct patches than the best commercial models while Google's Cloud Vulnerability Research team found a critical foundational vulnerability in under two hours. The models show significant prompt-injection robustness gains measured by Gray Swan and carry CBRN misuse safeguards, with cyber-offense restrictions on the standard version. Pricing matches Gemini 3.7 Flash at $0.75 per million input tokens and $3.75 per million output tokens.

  • Gemini 3.8 Flash Cyber is gated via the Fairwind program for governments, critical infrastructure operators, and software maintainers
  • Chrome Security says the Cyber variant generated 2.6x more correct patches than the best commercial models
  • Standard model includes CBRN misuse safeguards and cyber-offense restrictions; Gray Swan measured improved prompt-injection robustness
  • Same price as 3.7 Flash: $0.75/M input tokens, $3.75/M output tokens
Full article384 words · extracted from helpnetsecurity.com · click to collapse

Google has introduced Gemini 3.8 Flash, available to developers today, and a gated sibling, Gemini 3.8 Flash Cyber, reserved for vetted security teams.

Google Gemini 3.8 Flash

“Our 3rd Flash release in just 6 wks,” Google CEO Sundar Pichai said on X, adding that it makes sizable gains over 3.7 Flash in software engineering, agentic work, and multi-step reasoning. On the DeepSWE v1.1 benchmark, Google says it beats most larger frontier models at solving complex engineering problems end to end, at a lower cost.

Tulsee Doshi, Google’s senior director of product management, and Raluca Ada Popa, Gemini Security Lead at Google DeepMind, trace the improvements in part to how the model handles a task.

“3.8 Flash works harder,” the two wrote, citing extra reasoning steps and repeated tool calls before it settles on an answer. Anyone who prioritizes lower cost over depth can reduce the model’s effort setting or stay on 3.7 Flash.

Access to Gemini 3.8 Flash Cyber runs through a new program called Fairwind, built for trusted government authorities, critical infrastructure operators, and software maintainers hunting vulnerabilities in large codebases.

“We have invested in vulnerability fixing from the start,” Doshi and Popa said, placing patching ahead of offensive work like exploitation. Chrome Security reported that 3.8 Flash Cyber produced 2.6 times more correct patches than the best commercial models, while Google’s Cloud Vulnerability Research team says it found a critical foundational vulnerability in under two hours — work that would normally take months.

Standard 3.8 Flash carries safeguards against chemical, biological, radiological, and nuclear misuse, along with restrictions on cyber-offense uses. The Cyber version uses more permissive cybersecurity safeguards, which is why Google kept it behind Fairwind instead of shipping it to every developer.

Doshi and Popa also said the Gemini 3.8 models made a “significant leap” in prompt-injection robustness, citing measurements by AI security company Gray Swan.

Gemini 3.8 Flash launches at the same introductory price as 3.7 Flash, at $0.75 per million input tokens and $3.75 per million output tokens.

The model is available to developers through the Gemini API in Google AI Studio, Google Antigravity, Android Studio, and Stitch. Enterprises can access it through Gemini Enterprise, while Google AI Pro and Ultra subscribers can use it in the Gemini app, AI Mode in Google Search, and Gemini in Google Sheets.

Text extracted automatically; images, tables and formatting may be missing. Original: https://www.helpnetsecurity.com/2026/09/03/google-gemini-3-8-flash/