Google Catches Hackers Using AI to Find a Zero-Day Before Anyone Else

For years the AI security conversation has been theoretical. Could attackers use models to find vulnerabilities at scale? Could defenders keep up? Google's Threat Intelligence Group just answered the first question with a yes and the second question with a maybe. They identified what they describe as the first documented case of an AI assisted zero-day discovery in the wild and apparently stopped the planned mass exploit before it landed.

The technical details are sparse, which is normal for incidents like this. What matters is the precedent. A capable model, a creative attacker, and enough compute can now do in days what used to take a serious research team weeks. The defenders won this round because Google has the visibility of literally most of the internet and the model talent to match. That is not a generalizable advantage.

Every CISO with a budget meeting next week just got a new slide. Every vendor selling AI for offensive security testing just got a new pitch deck. And every dev team running outdated dependencies got a new reason to actually patch this time.

• •Google Threat Intelligence Group publicly documented the incident
• •Attackers reportedly used AI to discover a previously unknown vulnerability
• •Google says it intervened before a planned mass exploitation event
• •Technical details remain limited to protect ongoing investigations
• •This is being described as the first publicly documented case of its kind
• •Industry response includes accelerated investment in AI assisted defense tooling