This is one of those moments.
Google Threat Intelligence Group reported on May 11, 2026, that it identified a threat actor using a zero day exploit that Google believes was developed with the help of artificial intelligence. The attackers were not just using AI to write phishing emails. They were not using it to clean up malware comments or generate commodity scripts. According to Google, they used it to support the discovery and weaponization of a previously unknown vulnerability. The target was a popular open source, web based system administration tool, and the exploit enabled a bypass of two factor authentication, although valid user credentials were still required. [1]
That last detail matters. This was not movie magic. This was not an autonomous demon crawling out of a server rack. It was worse than that, because it was realistic.
The vulnerability was not some old school memory corruption bug. Google described it as a high level semantic logic flaw created by a hardcoded trust assumption. That is exactly the kind of weakness humans miss because the code looks functional. It is also exactly the kind of flaw a large language model can help surface because these systems are getting better at reading intent, correlating logic, and finding contradictions in how developers think the system works versus how the system actually behaves. [1]
That should scare the hell out of every security leader who still thinks AI in the attack chain is mostly about fake invoices and better grammar.
The old comfort blanket was simple. AI could assist attackers, but it could not really think through exploitation. It could help with recon, code snippets, documentation, translation, lure writing, and automation. Now Google is saying the line has moved. AI is being used as a force multiplier in vulnerability discovery and exploit development. Google stated that it had high confidence the actor likely leveraged an AI model based on the structure and content of the exploit, including educational style docstrings, a hallucinated CVSS score, and structured Python formatting characteristic of large language model training data. [1]
That is the part nobody wants to say out loud. The machine does not need to be perfect. It only needs to make the attacker faster.
Reuters reported that Google said the operation was blocked before it could be used as part of a mass exploitation event. Reuters also reported that this was the first time Google had identified attackers using AI to discover a new vulnerability and attempt to exploit it at scale. [2]
The Associated Press reported the same core issue. Google disrupted a criminal group’s attempt to use AI to exploit a previously unknown vulnerability, notified the affected company and law enforcement, and stopped the operation before damage occurred. AP also reported that Google did not name the targeted tool, the affected company, the threat group, or the model used, and that Google said the model was most likely not Gemini or Anthropic’s Claude Mythos. [3]
So let us keep this clean. We do not know the vendor. We do not know the exact model. We do not know the full identity of the group. We do know that Google’s threat intelligence team says this happened, and that is enough to take the gloves off.
The real story is not that attackers used AI. That has been happening. The real story is that AI is now moving deeper into the kill chain, closer to the point where vulnerabilities become weapons.
Google’s broader report describes a maturing transition from early AI enabled activity to industrial scale use of generative models inside adversary workflows. It says threat actors are using AI for vulnerability research, malware development, autonomous attack orchestration, reconnaissance, information operations, and scalable access to premium model capabilities through proxy services, account pooling, automated registration, and other abuse infrastructure. [1]
That is the shift.
AI is not replacing the attacker. AI is becoming part of the attacker’s nervous system.
The defenders who survive this era will be the ones who stop treating AI as a productivity toy and start treating it as a change in operational physics. The speed changes. The labor cost changes. The skill floor changes. The amount of testing an attacker can do before touching your environment changes.
Google’s 2025 zero day review already warned that AI would accelerate the race between attackers and defenders in 2026 by reducing the time required for reconnaissance, vulnerability discovery, and exploit development. That same review tracked 90 zero day vulnerabilities exploited in the wild in 2025, with enterprise technologies reaching an all time high share of the total. [4]
Now that forecast is no longer theoretical.
This is where the boardroom nonsense needs to die. You cannot PowerPoint your way out of machine speed exploitation. You cannot annual penetration test your way out of it. You cannot buy one shiny box, slap AI on the dashboard, and call yourself resilient.
You need asset intelligence that is real. You need identity controls that are ruthless. You need patching that does not move at committee speed. You need detection engineering that understands behavior, not just indicators. You need application security that hunts logic flaws before someone else’s model does. You need defenders who are allowed to move as fast as the adversary.
And yes, you need AI on defense. Not because it is trendy. Because human scale response is already losing.
Google’s report also makes clear that AI cuts both ways. The same class of technology being abused by attackers is also being used by defenders. Google pointed to AI agents such as Big Sleep for identifying software vulnerabilities and Gemini reasoning capabilities through CodeMender for automatically fixing vulnerabilities. [1]
That is the fight now.
Machine assisted offense versus machine assisted defense.
The uncomfortable truth is that attackers do not need procurement meetings. They do not need risk acceptance forms. They do not need six months to integrate a platform. They test, adapt, break, and move. Meanwhile, defenders are still arguing over ownership of logs.
This is why the AI zero day story matters. It is not about one exploit. It is about compression. The time between discovery, weaponization, and attempted exploitation is shrinking. The people who keep pretending this is just another cybersecurity trend are going to get folded.
I am a transhuman hacker. I live with technology under my skin, so I do not say this from the cheap seats. The boundary between human and machine has been dissolving for years. Cybersecurity is just finally being forced to admit it.
The attacker is no longer just a person at a keyboard.
The attacker is a person, a model, a workflow, an agent, a dataset, a proxy layer, an automation chain, and a business model.
That is the new adversary.
The question is not whether AI will change cybersecurity. That question is dead.
The question is whether defenders will evolve before the next zero day does.
About the Author
Len Noe is a Solutions Architect at BeyondTrust, Transhuman, Podcaster, International Cyber Security Speaker, Author, Technical Evangelist, and Biohacker with 11 implanted microchips. A former blackhat and ex-1% motorcycle club member with more than 30 years in technology, he has presented in over 70 countries and is featured in the documentary I Am Machine, which premiered at DEF CON 2025.
https://www.i-am-machine.com
References
[1] Google Cloud, Google Threat Intelligence Group, “GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access,” May 11, 2026.
https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access
[2] Reuters, “Hackers pushing innovation in AI enabled hacking operations, Google says,” May 11, 2026.
https://www.reuters.com/legal/litigation/hackers-pushing-innovation-ai-enabled-hacking-operations-google-says-2026-05-11/
[3] Associated Press, “Google disrupts hackers using AI to exploit an unknown weakness in a company’s digital defense,” May 11, 2026.
https://apnews.com/article/google-ai-cybersecurity-exploitation-mythos-926aea7f7dc5e0e61adce3273c55c6d4
[4] Google Cloud, Google Threat Intelligence Group, “Look What You Made Us Patch: 2025 Zero Days in Review,” March 5, 2026.
https://cloud.google.com/blog/topics/threat-intelligence/2025-zero-day-review
[5] LinkedIn, The Cyber Security Hub, “For The First Time Ever, Hackers Use AI To Develop Zero Day Exploits, Marking A Historic Moment In Cybersecurity,” May 11, 2026.
https://www.linkedin.com/pulse/first-time-ever-hackers-use-ai-develop-zero-day-m3bje