Google report reveals that hackers used AI to create ‘zero-day security flaw’ for the first time
Google has recently launched a new global strategy to monitor hacking attempts by utilizing artificial intelligence technology.
The Alphabet-owned company stated that hackers from a prominent cybercrime group used artificial intelligence to uncover a previously unknown software flaw and an exploit to take advantage of it for the first time. According to Google, hackers are driving innovation in AI-enabled hacking operations.
The planned attack targeted a widely used open-source system administration tool but was blocked before it could be used as part of a “mass exploitation event,” Google said in a report from its Threat Intelligence Group.
This incident marks the first time Google has identified attackers using AI to discover a new vulnerability and attempt to exploit it at scale.
John Hultquist, chief analyst at Google Threat Intelligence Group, stated that the findings likely represent the “tip of the iceberg” in terms of how criminals and state-backed hackers are advancing AI hacking innovation.
The report also detailed how hackers are beginning to delegate parts of their cyber operations to artificial intelligence, using it to autonomously search for software flaws and assist in building malware. Researchers noted that this shift represents an early move toward more autonomous cyber operations, as attackers start to rely on AI systems not just as research tools but as active components that can analyze targets, generate code, and make decisions with limited human oversight.
Governments around the world are struggling with how to regulate powerful new AI models that could make it easier for hackers to identify targets and launch attacks using both known and newly discovered software flaws. The findings serve as a reminder of warnings from financial regulators in Europe, who say that rapidly evolving AI models are increasing the speed and scale of cyber risks at a time of heightened geopolitical tensions.
According to Google’s report, cybercriminals as well as state-linked hacking groups tied to China, Russia, and North Korea are already experimenting with integrating AI directly into attack workflows. While the techniques remain at an early stage, Google warned they could accelerate cyber campaigns by reducing the time and expertise needed to launch complex attacks.