Google Detects First AI-Generated Zero-Day Exploit

Google has detected what it believes is the first zero-day exploit developed using artificial intelligence, marking a significant milestone in cyber threats. According to a new report, a prominent cybercrime group used AI to create a Python script designed to bypass two-factor authentication on an open-source system administration tool, with the exploit showing telltale signs of large language model assistance including educational docstrings and a hallucinated security score. Google also found that Chinese and North Korean state-sponsored hackers have been particularly active in leveraging AI tools for vulnerability discovery and exploit development.