Google Discovers The First Known Case Of Hackers Using AI To Create A Zero-Day Exploit - AOL.com

Google’s Threat Intelligence Group has identified what it believes is the first known case of hackers using artificial intelligence to create a zero-day exploit. According to the article, the exploit targeted a vulnerability in a Python script and was designed to bypass two-factor authentication. Google stated that the exploit was intended for a mass exploitation event, though further details about the threat actor or the scale of the campaign were not disclosed.

The vulnerability exploited exists in a widely used Python library, though the article does not specify which one. The attackers reportedly used an AI model to generate the exploit code, marking a shift from traditional manual or tool-assisted exploit development. Google’s Threat Intelligence Group detected the exploit during routine monitoring and has since shared details with affected vendors.

This incident highlights the growing use of AI in offensive cybersecurity. Security researchers have previously warned that AI could lower the barrier for creating sophisticated exploits. Google has not released the specifics of the vulnerability or the AI model used, pending remediation efforts. The company advises users to keep software updated and to use multi-factor authentication where possible, though the exploit in question bypasses commonly deployed two-factor methods.