Google Says It Disrupted AI-Assisted Zero-Day Exploit
GTIG said it thwarted a planned mass exploitation using an AI-discovered zero-day that bypassed two-factor authentication on an unnamed open-source admin tool.
CNBCGoogle says it likely thwarted effort by hacker group to use AI for 'mass exploitation event'
GizmodoGoogle Says It Found Evidence of Hackers Using AI to Discover a Zero-Day Vulnerability
The VergeGoogle stopped a zero-day hack that it says was developed with AI
Washington TimesGoogle disrupts hackers using AI to exploit an unknown weakness in a company’s digital defense
Associated PressGoogle disrupts hackers using AI to exploit an unknown weakness in a company's digital defense
Overview
Google's Threat Intelligence Group said Monday it disrupted a criminal group's plan to use AI to exploit a zero-day allowing bypass of two-factor authentication on an unnamed open-source system administration tool.
GTIG said it has high confidence the exploit's Python script bore indicators of being produced with a large language model and that Google does not believe its Gemini model was used.
Google said it notified the affected vendor and law enforcement and worked with the vendor to disclose and address the vulnerability, and said its proactive counter discovery may have prevented a mass exploitation event.
The report said groups linked to China and North Korea showed significant interest in AI-driven vulnerability discovery, while Anthropic limited Mythos to select testers including Apple, CrowdStrike, Microsoft and Palo Alto Networks.
Dean Ball, a senior fellow, said it could take years to harden the world's software and predicted a transitional period when cybersecurity risks may rise significantly.
Analysis
Center-leaning sources frame the story around a heightened cybersecurity threat by foregrounding Google's GTIG findings and authoritative language (e.g., 'high confidence,' 'prominent' actor), while placing skeptical voices (Daniel Stenberg calling Mythos a 'marketing stunt') later in the piece—producing a dominant risk narrative softened by a secondary counterpoint.