Google detects and blocks first known AI-assisted zero-day exploit

Summary

Google's Threat Intelligence Group has detected and stopped what it says is the first known zero-day exploit developed with AI assistance. The exploit, created by prominent cybercrime threat actors, targeted an open-source web-based system administration tool and aimed to bypass two-factor authentication in a planned mass exploitation event. Google researchers identified AI involvement through telltale signs in the Python exploit script, including a hallucinated CVSS score and structured, textbook-style formatting consistent with LLM output.