rotative
theverge ai · 2026年5月11日

谷歌阻止首个利用AI开发的零日漏洞利用

谷歌威脅情報小組攔截了一個針對基於Web的系統管理工具並可繞過2FA的AI生成零日漏洞利用。

read in English · 繁體中文 · 日本語 · 한국어

google threat intelligence group (gtig) disrupted a zero-day exploit developed with ai that 'prominent cyber crime threat actors' planned for mass exploitation. the python script contained signs of ai generation, including a 'hallucinated' cvss score and code structure mirroring llm training data. it targeted a logic flaw in an unnamed open-source tool to bypass 2fa, though google confirmed gemini was not used. the report highlights a trend of hackers using persona-driven jailbreaking and tools like openclaw to refine ai-generated payloads for increased reliability.

read at source ↗

← rotative