UPDATED
HackRead · · Critical severity
Pwn2Own Berlin 2026 reportedly reached full capacity for the first time, prompting rejected researchers to publicly disclose zero-day exploits targeting Firefox, NVIDIA, and AI platforms.
TechRepublic · · Critical severity
Google says hackers used AI to help build a zero-day exploit targeting 2FA, raising concerns about AI-assisted hacking. The post Google Says Hackers Used AI to Build Zero-Day Exploit appeared first on TechRepublic .
TechRadar · · Critical severity
Android Authority · · Critical severity
TL;DR Google says cybercriminals are now using AI for much more than phishing emails, including discovering software vulnerabilities, creating malware, and automating cyberattacks. One of the biggest concerns is the possibility of the...
BGR · · Critical severity
Cybersecurity just entered a dangerous new era. Google has uncovered a first-of-its-kind exploit created by hackers using AI, which is certainly scary.
CSO Online Security · · Critical severity
Linux server admins may get the ability to turn off a vulnerable function in the OS kernel until a patch for a zero-day vulnerability is ready, if a proposal from a kernel developer and maintainer is accepted by the open source...
HackRead · · Critical severity
Google researchers say hackers used AI to develop zero-day exploits, Android backdoors, and automated supply chain attacks targeting GitHub and PyPI.
Gizmodo · · Critical severity
The tech giant says this is the first time it has identified such a case.
CIO Dive · · Critical severity
A report by GTIG shows threat groups are increasingly leveraging AI to scale attacks. The exploitation attempt was disclosed and patched, preventing a mass incident.
Engadget · · Critical severity
The Google Threat Intelligence Group said its proactive measures stopped a "mass exploitation event."
PYMNTS.com · · Critical severity
Google Threat Intelligence Group (GTIG) said Monday (May 11) that it identified and may have prevented the use of the first zero-day exploit developed with artificial intelligence. Writing in the latest GTIG AI Threat Tracker , which...
PYMNTS.com · · Critical severity
Google cybersecurity researchers said in a Monday (May 11) report that they uncovered hackers using artificial intelligence to take advantage of so-called “zero-day” flaws. The discovery is a first for the Google Threat Intelligence...
Slashdot · · Critical severity
Google says it has seen the first evidence of cybercriminals using AI to create a zero-day vulnerability. "Google reported its findings to the unnamed firm affected by the vulnerability before releasing its report," reports Politico....
The Hacker News · · Critical severity
Google on Monday disclosed that it identified an unknown threat actor using a zero-day exploit that it said was likely developed with an artificial intelligence (AI) system, marking the first time the technology has been put to use in...
The Verge · · Critical severity
For the first time, Google says it has spotted and stopped a zero-day exploit developed with AI. According to a report from Google Threat Intelligence Group (GTIG), "prominent cyber crime threat actors" were planning to use the...
The Register · · Critical severity
Google says crooks already have AI cooking up zero-days, and claims one nearly escaped into the wild before the company stopped it. In a report shared with The Register ahead of publication on Monday, Google’s Threat Intelligence Group...
TechRepublic · · Critical severity
OTT Cybersecurity LLC announced several milestones that position the company as foundational security infrastructure for the agentic AI era. The post Lyrie.ai Deploys Real-Time Zero-Day Tracking Across Global Enterprise Infrastructure...
IT Pro · · Critical severity
Zero-day exploit concept image showing red-colored binary code on a computer screen, blurred code and user alerts.
The Register · · Critical severity
Google says crooks already have AI cooking up zero-days, and claims one nearly escaped into the wild before the company stopped it. In a report shared with The Register ahead of publication on Monday, Google’s Threat Intelligence Group...
CSO Online Security · · Critical severity
The Google Threat Intelligence Group (GTIG) today released evidence of a zero-day exploit developed by a cybercriminal group with the help of AI. It marks the first time the security research group has identified what it believes to be...
SecurityWeek · · Critical severity
The zero-day was designed to bypass 2FA and it was developed by a prominent cybercrime group. The post Google Detects First AI-Generated Zero-Day Exploit appeared first on SecurityWeek .
BleepingComputer · · Critical severity
Researchers at Google Threat Intelligence Group (GTIG) say that a zero-day exploit targeting a popular open-source web administration tool was likely generated using AI.
SiliconANGLE · · Critical severity
Criminal hackers have used artificial intelligence to develop a working zero-day exploit, the first confirmed case of its kind, according to a report released today by Google LLC’s Google Threat Intelligence Group. The GTIG AI Threat...
Help Net Security · · Critical severity
Google’s threat intelligence researchers have linked a zero-day exploit to AI-assisted development by a criminal group. The exploit targeted a popular open-source web-based system administration tool. It allowed attackers to bypass...
Infosecurity Magazine · · Critical severity
Google Threat Intelligence Group details how cybercriminals attempted to launch a campaign based around an AI-developed Zero-Day targeting open-source software
CSO Online Security · · Critical severity
OTT Cybersecurity LLC, the company behind Lyrie.ai , today announced several milestones that together position the company as foundational security infrastructure for the agentic AI era: the deployment of a real-time zero-day tracking...
Mandiant Blog · · Critical severity
Written by: Rommel Joven, Josh Fleischer, Joseph Sciuto, Andi Slok, Choon Kiat Ng Update (September 3): This post was updated to include information about GoTokenTheft usage. In a recent investigation, Mandiant Threat Defense discovered...
Mandiant Blog · · Critical severity
Written by: Peter Ukhanov, Genevieve Stark, Zander Work, Ashley Pearson, Josh Murchie, Austin Larsen Update (Oct. 11, Oracle released another patch , addressing CVE-2025-61884. 29, 2025, Google Threat Intelligence Group (GTIG) and...
TNW · · Critical severity
Anthropic built an AI model that found thousands of zero-day vulnerabilities in every major operating system and web browser. The Federal Reserve chair and the Treasury secretary called bank CEOs to discuss it. The company says there is...
Slashdot · · Critical severity
mrspoonsi shares a report: Dirty Frag is a vulnerability class, first discovered and reported by Hyunwoo Kim (@v4bel), that can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write vulnerability...
BleepingComputer · · Critical severity
federal agencies four days to secure their networks against a high-severity vulnerability in Ivanti Endpoint Manager Mobile (EPMM) exploited in zero-day attacks.
Help Net Security · · Critical severity
Ivanti has released fixes for 5 high-severity vulnerabilities in its Endpoint Manager Mobile (EPMM) solution, one of which (CVE-2026-6973) has being exploited as a zero-day by attackers. “We are aware of a very limited number of...
BleepingComputer · · Critical severity
A new Linux zero-day vulnerability, named Dirty Frag, allows local attackers to gain root privileges on most major Linux distributions with a single command.
SecurityWeek · · Critical severity
CVE-2026-6973 is a high-severity vulnerability that allows an attacker who has admin privileges to execute arbitrary code. The post Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek .
Help Net Security · · Critical severity
Palo Alto Networks believes the in-the-wild exploitation of a zero-day vulnerability (CVE-2026-0300) in its firewalls is likely the work of state-sponsored threat actors. A flaw with no patch (yet) CVE-2026-0300 is a buffer overflow...
PYMNTS.com · · High severity
The public narrative around third-party cyber risk has traditionally focused on downstream fallout. When a software provider or financial services vendor suffered a breach, the attention typically shifted to the systemically important...
SecurityWeek · · Critical severity
The cybersecurity firm has not explicitly accused China of being behind the attack, but the evidence suggests it was. The post Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking appeared first on...
BleepingComputer · · Critical severity
Ivanti warned customers today to patch a high-severity remote code execution vulnerability in Endpoint Manager Mobile (EPMM) exploited in zero-day attacks.
The Register · · Critical severity
State-backed hackers have been quietly exploiting a fresh zero-day in Palo Alto Networks firewalls to gain root access with no login required. The flaw, tracked as CVE-2026-0300 and carrying a CVSS severity rating of 9.3, affects the...
The Hacker News · · Medium severity
Turns out the easiest way to get hacked in 2026 is still the same old garbage: shady packages, fake apps, forgotten DNS junk, scam ads, and stolen logins getting dumped into Discord channels like it’s normal. Some of these attack chains...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free