Google detects first AI-developed zero-day exploit tied to mass cyberattack

Google says it stopped a campaign that may have used AI to develop a new zero-day exploit against a web admin tool, potentially bypassing two-factor authentication before mass use.

The report says state-backed and criminal groups are increasingly using generative AI for malware, phishing, vulnerability research, and more autonomous attacks.

Google warns AI is lowering the barrier to faster, harder-to-detect cyberattacks, while also helping defenders spot and fix flaws more quickly.

Google is also using AI tools such as Big Sleep and CodeMender to accelerate vulnerability discovery and patching.