Google Detects Sophisticated AI-Driven Cyber Threats Using Zero-Day Exploits

Post Views: 6

Cybersecurity Experts Warn of Rising Threat from AI-Powered Attacks

As the cybersecurity landscape continues to evolve, hackers are increasingly turning to artificial intelligence (AI) to aid in their malicious activities. A recent threat intelligence report from Google’s Threat Intelligence Group (GTIG) has highlighted the growing trend of AI-powered attacks, which pose a significant threat to organizations worldwide.

A Growing Trend of AI-Powered Attacks

According to the report, cybercriminals are using AI tools to develop zero-day exploits, bypass multi-factor authentication systems, and automate malware. This marks a significant shift in the way vulnerabilities are discovered and weaponized, as AI-powered attacks are more sophisticated and harder to detect than traditional ones.

“AI-powered attacks represent a major turning point in digital security,” said a cybersecurity expert. “Attackers are now combining automation, generative models, and supply chain exploitation to scale operations beyond traditional limits.”

Examples of AI-Powered Attacks

A zero-day exploit that targets a vulnerable open-source web administration system was created using Python-based code and leveraged a semantic vulnerability in the system’s 2FA enforcement logic.
Another group, identified as UNC2814, used “persona-based jailbreaking” techniques to trick AI models into acting as senior security researchers for firmware analysis.
APT45 was found automating large-scale prompt-based analysis of vulnerability databases, enabling rapid proof-of-concept development for potential exploits.
PROMPTSPY malware integrates directly with a generative AI API during execution, converting the victim device’s user interface into structured data and sending it to an AI model, which then returns automated commands.

Response from Google

In response to the rising threat, Google has expanded its defensive AI initiatives. Tools such as automated vulnerability detection agents and AI-driven patching systems are being deployed to identify and remediate security flaws before they can be exploited. Security systems like Google Play Protect are actively blocking known malware variants, including PROMPTSPY-related samples.

“We’re committed to staying ahead of emerging threats and protecting our users from AI-powered attacks,” said a Google spokesperson. “Our defensive AI initiatives will continue to evolve to address this growing threat.”