CertiK researchers said they found two security flaws in Google’s EdgeTPU, tracked as CVE-2026-0150 and CVE-2026-0153. Google acknowledged the findings and listed them in its June 2026 Security Bulletin, rating the bugs High and Critical. Beyond the disclosure itself, the research points to a broader shift in how companies need to think about AI security. The report argues that as AI systems move from generating content to carrying out tasks, the security focus can no longer stay limited to model behavior alone. Enterprises are now deploying AI across identity verification, facial recognition, edge inference and other business-critical functions, while AI agents are increasingly connecting to databases, APIs and third-party tools. In that setting, risk can emerge not only inside a model, but across the interfaces and trust relationships that link infrastructure, applications and external systems. CertiK also ties this change to a wider industry trend. It cites McKinsey’s “The state of AI in 2025,” which says 88% of companies have deployed AI in at least one business function and more than 60% have begun exploring AI agents. A separate Google Cloud survey found 83% of respondents believe major infrastructure upgrades are needed to support AI agents at scale. The company says the practical implication is clear: securing AI now means validating the full system, from development and deployment to runtime operations.