Google disrupts cyberattack using AI to exploit zero-day vulnerability, marking the era of AI-driven hacking

Google said it observed a criminal group using an AI large language model to discover a zero-day vulnerability (a previously unknown security flaw) in a popular online system administration tool. Google disrupted the operation before it caused damage and notified the affected company and law enforcement.

The AI model used was most likely not Google's Gemini or Anthropic's Claude Mythos, according to Google. John Hultquist, chief analyst at Google's threat intelligence arm, stated: "It's here. The era of AI-driven vulnerability and exploitation is already here."

Anthropic's recently announced Mythos model sparked calls for regulation due to its capability at hacking and cybersecurity work. Anthropic created Project Glasswing with Amazon, Apple, Google, Microsoft, and JPMorgan Chase to secure critical software from risks posed by the new model to public safety, national security, and the economy.