Hackers are now leveraging artificial intelligence to identify and exploit zero-day vulnerabilities, marking a new era in cybersecurity threats. Recently, a significant security flaw was uncovered in a widely-used web-based administration tool, allowing attackers to bypass two-factor authentication. This vulnerability was not a typical one; it was embedded in the logic of the code, making it difficult for traditional security scanners to detect. Google’s proactive measures prevented a large-scale attack by notifying the software maker discreetly. The report highlights that state-sponsored hackers from China and North Korea are using AI to hunt for vulnerabilities on a massive scale, while Russian groups are developing adaptive malware. AI is transforming phishing tactics by creating personalized and sophisticated lures. This shift indicates that AI is no longer just a research tool but an active participant in offensive security, capable of making rapid tactical decisions. However, AI also offers defensive potential, as demonstrated by Google’s AI tools that identified the zero-day threat in time to prevent damage.

