9
Google announces its first-ever discovery of a zero-day exploit made with AI (www.engadget.com)
submitted 6 months ago by to c/cybersecurity@sh.itjust.works
comment fedilink hide all child comments

no comments (yet)

sorted by: hot top controversial new old
there doesn't seem to be anything here
18 comments in c/technology@lemmy.world view that post
[–] 16 points 6 months ago (2 children)

Why?

Google added that it doesn't believe its own Gemini models were used, but still has "high confidence" an AI model was part of discovering the vulnerability and weaponizing an exploit.

No, really, why? If Google itself or their models didn't discover the vulnerability, how would they know genAI was used on the discovery of the vulnerability and weaponization (interestingly, not "creation") of an exploit?

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 3 points 6 months ago

    Google and all large companies employ a fleet of both fte security researchers and 3rd party security firms to constantly stay on the edge of security threats. They constantly are looking at artifacts from the wild and white papers etc

  • permalink
  • fedilink
  • source
  • parent
    • [–] 27 points 6 months ago (4 children)

    There will be many more made because of AI.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 24 points 6 months ago (2 children)

    They sell you the AI to create the buggy code, and then they sell you more AI to fix the bugs. Amazing. Just think of the amount of profit for the shareholders.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
    • [–] 7 points 6 months ago (2 children)

    Google circa 2002: "Don't be evil"

    Google 2026: "Try to be slightly less evil than the top 5 evil things combined"

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 5 points 6 months ago

    In retrospect, it's kind of wild how many of us (myself sadly included) actually believed Google's "Don't be evil" thing instead of seeing it as a "My "Not involved in human trafficking" T-shirt has people asking a lot of questions already answered by my shirt." situation.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 9 points 6 months ago

    Generative AI didn't make anything, it just retrieved indexed code that already existed.

  • permalink
  • fedilink
  • source
    •
    [+] 11 points 6 months ago (2 children)
    [deleted]
  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 3 points 6 months ago

    I think there's some confusion around the title. Google found that someone was using AI to identify exploits. Google itself is not announcing that AI made something that has a zero day exploit.

    Seems like the exploiter was using Google's AI to try and find exploits and that's probably what alerted them.

  • permalink
  • fedilink
  • source
  • parent
    • [–] 4 points 6 months ago

    "first". Sure. Ok.

  • permalink
  • fedilink
  • source
    •
    [–] 1 point 6 months ago* (last edited 6 months ago) (1 child)

    made with AI

    Fake. "AI" doesn't exist. There's no need to even read these articles when the headline alone is straight bullshit.

    But if you read the article, it gets even phonier, This is just another example of supposedly generated code which is absolutely nothing new. But they don't really know. The grifter headline states speculation as fact.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •