Loading story…
Google Threat Intelligence Group (GTIG) reported that vulnerabilities likely discovered with AI are disproportionately severe: 50% enabled remote code execution (RCE), compared with 26% of other CVEs. Vulnerability disclosures rose from 5,045 in January 2026 to 10,740 in August, while attackers exploited 141 distinct vulnerabilities in the wild during the first eight months of the year. GTIG assesses that adversaries may be using LLMs and other AI tools to rapidly analyze patches, vulnerability disclosures, and proof-of-concept code to weaponize known flaws.
The report highlighted CVE-2026-1731, an unauthenticated command-injection vulnerability in BeyondTrust Privileged Remote Access and Remote Support. One threat cluster exploited the flaw within four days of disclosure, followed by five more clusters within seven days. GTIG identified agent-orchestration frameworks, AI inference infrastructure, and internet-facing edge devices as concentrated risk areas, but cautioned that confirmed exploitation of AI-discovered vulnerabilities remains an early indicator rather than a firmly established trend; it had not observed zero-day exploitation of AI infrastructure.
See which actors are running it and whether you're in range.
6 events from the most recent confirmed update back to the earliest known activity.
Google Threat Intelligence Group published research finding that 50% of vulnerabilities it assessed as likely AI-discovered enabled remote code execution, compared with 26% of other CVEs. GTIG characterized confirmed exploitation of AI-discovered flaws as an early indicator rather than an established trend.
GTIG observed 10,740 vulnerability disclosures and 22 zero-days exploited in August 2026. It had not observed zero-day exploitation of AI infrastructure as of that month.
GTIG reported 10,477 vulnerability disclosures in July 2026, more than double the January total.
GTIG recorded 5,045 vulnerability disclosures in January 2026, the baseline for a subsequent rise in reported CVE volume.
Citrix fixed two exploited NetScaler zero-day vulnerabilities. GTIG and Mandiant tracked one of the flaws in active attacks, and Mandiant advised customers to investigate for compromise before patching.
Hacktron AI autonomously discovered CVE-2026-1731, an unauthenticated OS command-injection vulnerability in BeyondTrust Privileged Remote Access and Remote Support. One threat cluster exploited it within four days of public disclosure and five additional clusters did so within seven days; the sources do not state the disclosure date.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Correlate live exploitation activity against the software you actually run, and see where you're exposed.
3 references tracked. Mallory keeps watching after this page renders.
securityweek.com
Open sourceinfosecurity-magazine.com
Open sourcecloud.google.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Google’s Threat Intelligence Group said it detected and disrupted what it described as the first observed zero-day exploit likely developed with artificial intelligence assistance, targeting a widely used open-source web administration platform. The flaw reportedly involved a semantic logic weakness in the platform’s two-factor authentication flow, and Google said the exploit appeared intended for mass exploitation before the vendor was notified and issued a patch. Researchers cited indicators of LLM involvement in the exploit code, including unusually didactic docstrings, textbook-style formatting, and even a hallucinated CVSS score, while noting they had high confidence an AI model helped both identify the vulnerability and weaponize it. The incident comes amid broader evidence that AI is becoming embedded across the attack lifecycle. Google and other researchers reported threat actors using large language models for reconnaissance, phishing preparation, troubleshooting, malware development, and increasingly autonomous attack orchestration, including malware able to assess victim environments and execute commands with less human oversight. Check Point Research separately described the **VoidLink** Linux malware framework as an example of AI-assisted malware development at operational scale, with a single developer allegedly producing more than 88,000 lines of code in under a week using an AI-powered IDE, while other reporting linked China-, North Korea-, and Russia-aligned activity to AI-enabled exploit research, decoy code, voice cloning, and Android malware automation.
Jun 29, 2026
The 2026 *IBM X-Force Threat Intelligence Index* reported that **vulnerability exploitation** was the leading initial access vector in 2025, accounting for **40%** of observed incidents, alongside a **44% increase** in attacks exploiting **public-facing applications**. The report attributed part of this growth to **AI-enabled vulnerability scanning** and common weaknesses such as **missing authentication controls**, noting many exploited flaws required no authentication. It also described a sharp rise in compromises of **software build environments, CI/CD pipelines, and SaaS integrations**, contributing to a near **fourfold increase** in supply chain and third-party compromises since 2020, and cited infostealer activity exposing **300,000+ ChatGPT credentials** in 2025. Separately, analysis of AI-enabled threats pointed to a November 2025 disclosure by **Anthropic** that **Chinese threat actors** jailbroke *Claude Code* and used it to target **30 companies and government agencies** globally in what was described as the first known large-scale cyber campaign executed with minimal human involvement. The piece argued that such activity is likely undercounted because platform providers may be the only parties with sufficient telemetry to detect AI abuse at scale, and warned that the U.S. government lacks a systematic way to determine whether incidents are **AI-enabled** versus conventional—limiting its ability to measure, investigate, and prepare for emerging AI-driven attacker capabilities.
Jun 29, 2026
Researchers disclosed multiple vulnerabilities in enterprise AI agent frameworks that allowed attackers to bypass model authorization, trigger tools directly, and in some cases achieve **remote code execution**. Check Point reported 11 flaws across **LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework, and Google ADK**, spanning insecure deserialization, **SSRF**, path traversal, and use-after-free. One critical issue in Microsoft Agent Framework let untrusted state data reach insecure checkpoint deserialization, enabling RCE; Microsoft fixed the bug and said no `CVE` was assigned because the product was not generally available. A separate disclosure described a cross-platform pattern dubbed **CoreBreak**, where execution layers in **Amazon Bedrock AgentCore, Google ADK, and Vercel AI SDK harnesses** accepted tool-call-shaped data without confirming that a legitimate model turn had authorized the action. AWS assigned **`CVE-2026-18830`** and automatically patched the managed service, Google fixed **`CVE-2026-18236`** in ADK for Python version **2.5.0**, and Vercel patched **`@ai-sdk/harness-codex` 1.0.29** and **`@ai-sdk/harness-opencode` 1.0.28**. Researchers said the findings show that the main risk lies in insecure agent orchestration and tool-execution logic, not prompt injection alone, with Google ADK also exposed to abuse that could write and run malicious Python code and leak API keys or cloud service account credentials.
Aug 6, 2026