AI-powered hacking has exploded into industrial-scale threat, Google says

AI-powered hacking has rapidly escalated into a large-scale threat, with criminal groups and state-linked actors increasingly using commercial artificial intelligence models to enhance and expand their cyberattacks. According to a report from Google’s threat intelligence group, this shift has occurred within just three months, marking a significant acceleration in the exploitation of AI for malicious purposes. The report highlights that actors from countries including China, North Korea, and Russia are leveraging AI tools such as Gemini, Claude, and OpenAI models to improve the speed, scale, and sophistication of their operations. John Hultquist, chief analyst at Google’s threat intelligence group, emphasized that the race to exploit AI vulnerabilities is not a future concern but an ongoing reality. AI enables threat actors to test operations, develop more effective malware, and maintain persistence against targets. This development has raised alarms across the cybersecurity community, especially following Anthropic’s decision to withhold its advanced AI model, Mythos, due to its ability to identify zero-day vulnerabilities in major operating systems and web browsers. Anthropic warned that such capabilities could pose significant risks if misused, calling for coordinated defensive measures across the industry. Google’s report also revealed that a criminal group nearly launched a mass exploitation campaign using a zero-day vulnerability discovered with the help of an AI large language model different from Mythos. Additionally, the report noted experimentation with AI tools like OpenClaw, which gained attention for its lack of safeguards and potential to cause unintended damage, such as mass-deleting emails. Experts like Steven Murdoch, a security engineering professor at University College London, acknowledge that while AI presents new challenges for cybersecurity, it also offers defensive benefits, suggesting a complex balance between risks and opportunities in the evolving cyber threat landscape.