ai-generated malware

A joint federal advisory says attackers are using AI to generate Python exploitation scripts against internet-exposed Siemens S7 PLCs across US critical infrastructure.

A Huntress incident response investigation uncovered a PowerShell Active Directory recon script built by iteratively prompting an AI — the first documented case of 'vibe-coded' malware recovered from a live attack.

Check Point Research demonstrated that a frontier AI model independently discovered a viable ransomware attack path using Chrome's File System Access API — no native payload, no exploited vulnerability, no root access required.