Google Reports First AI-Hunted Zero-Day as Hackers Use LLMs for Offensive Security - News and Statistics

May 27, 2026

According to a recent Google report, the same artificial intelligence that streamlines tasks like drafting emails, building spreadsheets, and arranging vacations has also made it significantly simpler to identify previously unknown or unpredictable weaknesses in software systems.

First Documented AI-Driven Zero-Day Discovery

Google’s Threat Intelligence Group reported that it had, for the first time, identified hackers employing AI to locate and take advantage of a zero-day vulnerability—a security gap the software’s creator is unaware of and for which no patch exists. The affected system was a common web-based administration tool, and the flaw permitted attackers to circumvent two-factor authentication, the extra security layer many users trust to safeguard their accounts.

Google stated it detected the attack before it could be widely executed and discreetly informed the software maker. The report noted that the criminal threat actor intended to use it in a large-scale exploitation event, but Google’s proactive counter-discovery may have prevented that use. It also indicated that threat actors linked to the People’s Republic of China and the Democratic People’s Republic of Korea have shown considerable interest in leveraging AI for vulnerability discovery.

Logic-Based Flaws Beyond Traditional Detection

This zero-day vulnerability was not a standard flaw. Conventional security scanners search for crashes and memory errors—the software equivalent of a spellchecker catching a typo. However, this flaw was embedded in the code’s logic: a subtle, hardcoded assumption by the developer that no automated scanner would have detected. It represents a mistake where everything appears correct on the surface, but the underlying reasoning is flawed—similar to a bank vault with a functional lock that opens for anyone aware of a built-in exception the designer inadvertently created.

The report concluded that frontier LLMs excel at identifying such high-level flaws and hardcoded static anomalies. While these models struggle with complex enterprise authorization logic, they possess a growing ability to perform contextual reasoning and detect contradictions in hardcoded exceptions. This capability allows them to uncover dormant logic errors that appear functionally correct to traditional scanners but are insecure.

State-Sponsored and Industrial-Scale Vulnerability Hunting

Beyond the single zero-day, the full report presents a concerning picture. Chinese and North Korean state-sponsored hackers are using AI to search for vulnerabilities on an industrial scale, sending automated prompts to probe weaknesses in everything from home routers to corporate networks. Google observed one North Korean group sending thousands of repetitive prompts that recursively analyze different CVEs and validate PoC exploits, building what the report describes as a more robust arsenal of exploit capabilities that would be impractical to manage without AI assistance.

Russian-linked groups, meanwhile, are using AI to develop malware that rewrites itself on the fly to evade detection—a capability that previously required significant human expertise. AI is also transforming phishing. Instead of mass-blasting generic emails, attackers now use AI to map corporate hierarchies, identify specific targets with access to sensitive data, and generate higher-fidelity phishing lures tailored to individuals with administrative privileges, going well beyond the commodity tactics of traditional bulk phishing.

AI as an Active Participant in Offensive Security

Google warns of a broader shift: AI is no longer merely a research tool but is becoming an active combatant in the security sphere. The report states that the LLM is no longer merely a passive advisor but an active participant in the offensive chain, capable of orchestrating complex toolsets and making tactical decisions at machine speed.

The silver lining, according to Google, is that its own AI tools flagged the zero-day before it could cause damage. The company is deploying AI agents to find and patch vulnerabilities faster than human teams could manage.

1. INTRODUCTION

Making Data-Driven Decisions to Grow Your Business

REPORT DESCRIPTION
RESEARCH METHODOLOGY AND THE AI PLATFORM
DATA-DRIVEN DECISIONS FOR YOUR BUSINESS
GLOSSARY AND SPECIFIC TERMS

2. EXECUTIVE SUMMARY

A Quick Overview of Market Performance

KEY FINDINGS
MARKET TRENDS This Chapter is Available Only for the Professional EditionPRO

3. MARKET OVERVIEW

Understanding the Current State of The Market and its Prospects

MARKET SIZE: HISTORICAL DATA (2012–2025) AND FORECAST (2026–2035)
CONSUMPTION BY COUNTRY: HISTORICAL DATA (2012–2025) AND FORECAST (2026–2035)
MARKET FORECAST TO 2035

4. MOST PROMISING PRODUCTS FOR DIVERSIFICATION

Finding New Products to Diversify Your Business

TOP PRODUCTS TO DIVERSIFY YOUR BUSINESS
BEST-SELLING PRODUCTS
MOST CONSUMED PRODUCTS
MOST TRADED PRODUCTS
MOST PROFITABLE PRODUCTS FOR EXPORT

5. MOST PROMISING SUPPLYING COUNTRIES

Choosing the Best Countries to Establish Your Sustainable Supply Chain

TOP COUNTRIES TO SOURCE YOUR PRODUCT
TOP PRODUCING COUNTRIES
TOP EXPORTING COUNTRIES
LOW-COST EXPORTING COUNTRIES

6. MOST PROMISING OVERSEAS MARKETS

Choosing the Best Countries to Boost Your Export

TOP OVERSEAS MARKETS FOR EXPORTING YOUR PRODUCT
TOP CONSUMING MARKETS
UNSATURATED MARKETS
TOP IMPORTING MARKETS
MOST PROFITABLE MARKETS

7. PRODUCTION

The Latest Trends and Insights into The Industry

PRODUCTION VOLUME AND VALUE: HISTORICAL DATA (2012–2025) AND FORECAST (2026–2035)
PRODUCTION BY COUNTRY: HISTORICAL DATA (2012–2025) AND FORECAST (2026–2035)

8. IMPORTS

The Largest Import Supplying Countries

IMPORTS: HISTORICAL DATA (2012–2025) AND FORECAST (2026–2035)
IMPORTS BY COUNTRY: HISTORICAL DATA (2012–2025) AND FORECAST (2026–2035)
IMPORT PRICES BY COUNTRY: HISTORICAL DATA (2012–2025) AND FORECAST (2026–2035)

9. EXPORTS

The Largest Destinations for Exports

EXPORTS: HISTORICAL DATA (2012–2025) AND FORECAST (2026–2035)
EXPORTS BY COUNTRY: HISTORICAL DATA (2012–2025) AND FORECAST (2026–2035)
EXPORT PRICES BY COUNTRY: HISTORICAL DATA (2012–2025) AND FORECAST (2026–2035)

10. PROFILES OF MAJOR PRODUCERS

The Largest Producers on The Market and Their Profiles

11. COUNTRY PROFILES

The Largest Markets And Their Profiles

This Chapter is Available Only for the Professional Edition
PRO

11.1

United States