Google Thwarts First AI Zero-Day Attack as Schumer Seeks DHS Plan by July
Updated
Updated · Semafor · May 15
Google Thwarts First AI Zero-Day Attack as Schumer Seeks DHS Plan by July
3 articles · Updated · Semafor · May 15
Google’s Threat Intelligence Group said it blocked the first known cyberattack in which criminals used AI to find and exploit a zero-day flaw that could have bypassed two-factor authentication.
John Hultquist said the incident shows AI-enabled hacking is already underway, not a future threat, as Anthropic’s Mythos model also reportedly cracked MacOS in testing.
Chuck Schumer warned DHS that frontier AI could speed attacks on hospitals, grids, water systems, schools, elections and telecoms, and asked for a national response plan by the start of July.
CISA’s capacity has weakened during Trump’s second term: about one-third of its workforce has left, while proposed budgets would cut nearly $500 million in 2026 and another $707 million in 2027.
U.S. cybersecurity officials are now considering shorter deadlines for fixing critical government IT flaws as AI tools raise the speed and scale of potential attacks.
As AI automates hacking, is our entire digital infrastructure built on a foundation of undiscovered risk?
In the AI cyber arms race, can US innovation outpace China's state-controlled strategy for technological dominance?
2026’s First AI-Generated Zero-Day: The Dawn of AI-Driven Cyber Offense and Defense
Overview
In May 2026, Google's Threat Intelligence Group detected and stopped the first known AI-generated zero-day exploit used in a real-world cyberattack. The cybercrime group behind the attack used AI tools like OpenClaw and advanced techniques such as persona-driven jailbreaking to create the exploit. Google quickly alerted the developer of the targeted system administration tool, who then patched the vulnerability, preventing widespread damage. This incident marks a turning point, showing how hackers now use AI to find and exploit software flaws faster, and highlights the urgent need for advanced, AI-powered defenses in cybersecurity.