Web developers used AI to identify a bug that affected the majority of the world’s websites, according to Semafor. Soon afterward, Cloudflare noted a surge in attempts to exploit the opening. The report does not name the bug or say how many attempts Cloudflare observed.
Other warnings point to AI being used in attacks, though details are limited. Microsoft warned that a China-linked hacking group used AI to break into an IT services firm. Commercially available chatbots were also reportedly used in attacks on banks; the report does not name the banks or say whether those attacks succeeded.
A race to patch vulnerabilities
The incidents highlight a race between companies trying to fix security problems and attackers trying to exploit them. OpenAI calls the time defenders have to act “the defender’s window.” An Information reporter said AI advances may mean that window is close to closing.
The report does not identify the AI systems involved, explain exactly how they were used, or give details about damage from the attacks. It also does not say whether the website bug has been fixed. The warnings describe several different events, not one coordinated campaign.
Why it matters
For web developers and IT teams, the warnings underscore the pressure to fix vulnerabilities before attackers exploit them. For ordinary users, the report confirms no specific outage or data theft, so it is not possible to tell whether anyone’s personal information was affected.
