Google Catches First AI Zero-Day Exploit: A Warning Shot for Crypto Security?

📄Full Article· Automatically extracted by trafilatura2357 words

Google’s Threat Intelligence Group caught a criminal hacking crew using an AI-built zero-day exploit live in the wild for the first time, neutralizing a planned mass attack before it could trigger. The finding sits within a wider report showing that attackers now weave large language models into every stage of an intrusion. Defenders are racing to deploy their own AI hunters across the same fight. How the AI Zero-Day Exploit Worked The malicious code, written in Python, bypassed two-factor authentication (2FA) on a popular open-source system administration tool. Google has not named the affected vendor. Follow us on X to get the latest news as it happens Several signals pointed to a large language model author. The script carried tutorial-style docstrings and a fabricated Common Vulnerability Scoring System (CVSS) score, a metric no human researcher would invent. Google said its own Gemini model was not used. GTIG chief analyst John Hultquist warned that subtler AI-assisted intrusions may already be in motion undetected. “Each new generation of models will reduce the need for expert-developed harnesses, but they are almost certainly out there. We have to recognize the limits of our visibility into the backend of spies and criminals. The signs won’t be obvious. The race has started already,” he said. Defenders Push Back The same report flagged Russian-linked malware families PROMPTFLUX and PROMPTSPY, an Android backdoor that pings Gemini in real time to plan its next action. State-linked Chinese and North Korean operations are training private models on an 85,000-vulnerability dataset. Google countered with Big Sleep, an AI agent that hunts zero-days before attackers can find them, and CodeMender, an automated patching system. Big Sleep has already closed a flaw that hackers were preparing to weaponize. Why Crypto Should Watch The gap between attack and defense is sharpening. Binance Research recently found that AI agents exploit smart contracts twice as well as they detect threats. Earlier reporting flagged how Google AI tools can help scammers drain wallets, and a fresh Chrome flaw recently exposed private keys. Against this backdrop, exchanges are deploying their own AI shields, but the bar keeps climbing. With both sides now fielding autonomous agents, the next zero-day may surface from a machine on either bench.

Data Status✓ Full text extractedRead Original (BeInCrypto)

🔍Historical Similar Events· Keyword + Asset Matching6 items

2026-05-11

Hackers Used AI to Build a Zero-Day Exploit That Bypasses Two-Factor Authentication: Google

Similarity 230%關鍵字 exploit/day/zero

2026-05-12

Hackers used AI to craft zero-day attack to bypass 2FA: Google

Similarity 180%關鍵字 zero/day/google

2026-04-26

South Africa Crypto Draft Triggers 1M Rand Fine Warning From Valr CEO

2026-05-12

Elliptic raises $120 million backed by Nasdaq, Deutsche Bank as AI reshapes crypto security