Google Threat Intelligence reports AI‑crafted zero‑day exploit and DarkSword surveillance malware

Google’s Threat Intelligence Group disclosed two major cyber‑security findings. The first is a sophisticated exploit chain called DarkSword that can exfiltrate data, capture screenshots and record voice from compromised devices, indicating a comprehensive surveillance capability likely tied to well‑funded threat actors.

The second finding is the first confirmed real‑world case of an AI‑generated zero‑day exploit. An AI large‑language model created a script that bypassed two‑factor authentication by exploiting a logic flaw in a popular open‑source web administration tool. Google intervened, worked with the vendor and issued a patch before the exploit could be mass‑used. Both disclosures highlight emerging threats where advanced automation and multi‑modal malware increase the risk to high‑value targets.