Cyber Security News

Gemini 3.5 Flash Now Supports Agentic Computer Use for Enterprise Automation Tasks

Google has announced a significant enhancement to its AI platform with the release of Gemini 3.5 Flash, which now includes native support for agentic computer use. This new feature enables advanced enterprise automation across web, desktop, and mobile environments.

Introduced on June 24, 2026, this capability was previously limited to the standalone Gemini 2.5 computer-use model but is now fully integrated into the core Flash architecture.

This integration allows developers to create intelligent agents that can interact directly with real-world applications, representing a major advancement toward fully autonomous enterprise workflows.

Gemini 3.5 Flash Now Supports Agentic Computer Use

With built-in computer use, Gemini 3.5 Flash goes beyond traditional function calling and tool usage by enabling agents to visually interpret user interfaces, make contextual decisions, and perform actions such as clicking, typing, navigating, and structured data extraction.

This capability enhances the execution of long-term tasks, making it suitable for complex use cases including continuous software testing, enterprise process automation, and cross-application knowledge work.

The upgrade establishes Gemini as a strong competitor in the rapidly evolving agentic AI ecosystem, where cross-platform automation and reasoning are essential.

From a cybersecurity perspective, the ability of AI agents to operate in live environments introduces new vulnerabilities, particularly through prompt injection, unauthorized actions, and data exposure.

Gemini 3.5 Flash (Source: Google)

To address these concerns, Google has implemented targeted adversarial training within Gemini 3.5 Flash, helping the model to better differentiate between legitimate and malicious instructions. Additionally, two optional enterprise-grade safeguards have been introduced to enhance operational security.

These safeguards include enforced user confirmation for sensitive or irreversible actions and automatic task termination if indirect prompt injection attempts are detected.

Google recommends adopting a defense-in-depth strategy that combines these features with secure sandboxing, strict access controls, and human-in-the-loop validation to minimize risks associated with the execution of autonomous agents.

This layered security approach is crucial as organizations increasingly depend on AI-driven automation in sensitive enterprise environments.

Developers and enterprises can access the new functionality through the Gemini API and the Gemini Enterprise Agent Platform, which facilitates the rapid deployment of agent-based systems.

Google has also provided a live demo environment via Browserbase, along with a reference implementation on GitHub, to accelerate testing and development workflows.

FeatureDescription
Computer Use IntegrationNative capability embedded within Gemini 3.5 Flash
Agent CapabilitiesEnables agents to see, reason, and act across multiple platforms
Automation Use CasesSupports continuous testing, enterprise workflows, and knowledge automation
Security SafeguardsUser confirmation for sensitive actions and automatic task termination
Adversarial TrainingBuilt-in defenses against prompt injection attacks
Access MethodsAvailable via Gemini API and Enterprise Agent Platform
Development ResourcesDemo environment and GitHub reference implementation

As the adoption of agentic AI accelerates, the introduction of built-in computer use in Gemini 3.5 Flash underscores both the opportunities and security challenges associated with autonomous systems, reinforcing the need for robust safeguards and controlled execution in enterprise deployments.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago