Home / Technology / AI Now Crafting Cyberattacks: First Zero-Day Exploit Found
AI Now Crafting Cyberattacks: First Zero-Day Exploit Found
11 May
Summary
- AI is now suspected of developing zero-day exploits for cyberattacks.
- A threat actor planned a mass exploitation event using the AI-found exploit.
- AI offers tools for both cyber defense and offense, researchers note.
Cybersecurity concerns have escalated with the discovery of artificial intelligence being used to create zero-day exploits. For the first time, a threat actor reportedly employed an exploit developed with AI. Zero-day vulnerabilities are particularly dangerous as they leave targets with no prior warning or defense.
This threat actor intended to use the exploit for a widespread attack, but Google's Threat Intelligence Group (GTIG) discovered it beforehand, potentially preventing its use. While Google doesn't believe its own AI models were involved in this specific instance, it has high confidence that AI was used in its discovery and weaponization.
While the targeted company was not named, Google has informed them, and the issue has been patched. GTIG noted that groups associated with China and North Korea have shown interest in leveraging AI for cybersecurity exploits. This event is characterized as a significant preview of future threats.
AI's dual nature in cybersecurity is becoming apparent, as it can be used for malicious purposes as well as for defense. Other organizations are also exploring AI for protective measures, like Anthropic's Project Glasswing, which uses AI to identify and defend against severe vulnerabilities.
