Gemini 3.8 Flash Cyber

Gemini 3.8 Flash Cyber, announced September 2, 2026 alongside Gemini 3.8 Flash, was Google's second cybersecurity-specialised Gemini and the first to be named in the same post as the general model it takes its number from. Gemini 3.5 Flash Cyber had been announced two months after Gemini 3.5 Flash, folded into the launch of a different model, Gemini 3.6 Flash. Google introduced the pair on the strength of long-running agentic loops, the same training direction behind 3.8 Flash's coding gains, applied here to finding and repairing software vulnerabilities.

Google published one figure for it: 86.2% pass@1 on CyberGym, discovering vulnerabilities in C and C++ code. That was the leading published score at release, ahead of GPT-5.5-Cyber at 85.6% and Claude Mythos 5 at 83.8%, and a jump of nearly nine points over Gemini 3.5 Flash Cyber's 77.5% six weeks earlier — the same generational step the general model showed on coding, applied to the security track. The variant keeps its own page here and, because it publishes a score, its place in the CyberGym rankings; it is held out only of standing in for Google as a lab, since a security spin-off is the newest row on the timeline for weeks at a time and pairing it against another lab's general-purpose flagship would measure two different things.