Findings/ai-developed-exploit-in-the-wild

Google's threat intelligence team attributes to AI the development of a zero-day exploit that criminal actors prepared for mass exploitation, based on characteristics of the code.

Reportedreported1 evidence record from 1 independent sourceassistant-drafted

Scope: what this does not show

Attribution is inferred from code features such as explanatory docstrings and a hallucinated severity score. GTIG says its disruption may have prevented the exploit's use.

Reported: Stated by one source and not yet corroborated or challenged.

Evidence

May 11, 2026

Google Threat Intelligence reports the first criminal zero-day exploit it believes was AI-developed, disrupted before planned mass use

Google Cloud Blog (GTIG)

Key questions that rely on this finding

How are attackers using AI agents in real operations?Increasingly to run parts of intrusions: providers and vendors report agent-driven espionage, extortion and credential theft, and malware that queries LLMs.

Status history

2026-05-11ReportedGTIG report. · record

What would change this: Further attributed cases, or evidence contradicting the attribution.
Evidence kind: reported: Stated by a party without shareable evidence.
Freshness: Evidence 138d old · recheck in 227 daysNewest evidence May 11, 2026. Half-life 365 days.
Methods tested: AI-assisted vulnerability exploitation
Topics: AI-enabled intrusion Exploit development Threat intelligence

Cite this record

Fide AI. "Google's threat intelligence team attributes to AI the development of a zero-day exploit that criminal actors prepared for mass exploitation, based on characteristics of the code.." Agentic Cyber Explorer, record ai-developed-exploit-in-the-wild. https://agentic-cyber-explorer.pages.dev/findings/ai-developed-exploit-in-the-wild/ (corpus as of 2026-09-26).

BibTeX

@misc{fide-ace-ai-developed-exploit-in-the-wild,
  author = {{Fide AI}},
  title = {Google's threat intelligence team attributes to AI the development of a zero-day exploit that criminal actors prepared for mass exploitation, based on characteristics of the code.},
  howpublished = {Agentic Cyber Explorer},
  year = {2026},
  url = {https://agentic-cyber-explorer.pages.dev/findings/ai-developed-exploit-in-the-wild/},
  note = {Record ai-developed-exploit-in-the-wild; corpus as of 2026-09-26}
}

Data: JSON · CC BY 4.0

Know of evidence that changes this? Tell us.