谷歌AI阻止利用AI發現的零日漏洞發起的大規模攻擊

google's threat intelligence group detailed a security incident where an attacker used ai to discover a zero-day exploit for a planned mass attack, which google successfully stopped. the report indicates that state-backed actors from china and north korea are leveraging ai, including a custom claude plugin loaded with 85,000 vulnerability records, to identify security flaws. additionally, russian-linked groups are utilizing ai-generated code to obfuscate malware, and groups like "teampcp" are targeting open-source ai supply chains. google says it is countering these threats with ai-based tools like big sleep and codemender.