Google says it has disrupted an attempt by a criminal group to use artificial intelligence (AI) to exploit a previously unknown software vulnerability, highlighting growing concerns over the use of AI in cybercrime.

Google

The technology company disclosed this on Monday, saying the hackers planned to exploit a “zero-day” vulnerability in an unnamed company’s digital system before the attack was intercepted.

A zero-day vulnerability refers to a software flaw unknown to the vendor or security teams, leaving no time to develop a protective fix before exploitation.

John Hultquist, Chief Analyst at Google’s threat intelligence arm, described the incident as a significant shift in cybersecurity threats.

“It’s here. The era of AI-driven vulnerability and exploitation is already here,” Hultquist said.

According to Google, the attackers intended to exploit a security flaw that would have allowed them to bypass two-factor authentication and gain access to a widely used online system administration tool.

The company said it had notified the affected firm and relevant law enforcement agencies, successfully disrupting the operation before any damage occurred.

Google, however, declined to identify the targeted company, the threat actors involved, or the AI model used in the attempted breach.

The firm said preliminary analysis suggests the hackers used a large language model, similar to those powering popular AI chatbots, to identify the vulnerability.

Google noted there was no evidence linking the attempted attack to any government-backed operation, although groups connected to China and North Korea have reportedly explored similar AI-enabled cyber techniques.

The disclosure comes amid growing debate over the regulation of increasingly advanced AI systems capable of coding, vulnerability discovery, and cybersecurity analysis.

Recent advancements in AI hacking tools, including Anthropic’s newly announced cybersecurity-focused model, Mythos, have intensified concerns among governments and technology firms worldwide.

The U.S. government has also stepped up oversight of advanced AI systems, with the Commerce Department recently announcing agreements with major technology firms, including Google, Microsoft, and xAI, to evaluate powerful AI models before public release.

Industry analysts warn that while AI could strengthen cybersecurity by helping organisations detect and patch software flaws faster, it could also accelerate cyber threats by enabling criminals to discover and weaponise vulnerabilities at unprecedented speed.

Dean Ball, Senior Fellow at the Foundation for American Innovation, said governments may need to consider stronger oversight of advanced AI tools.

“I don’t like regulation. I would prefer for things not to be regulated. But I think we need to in this case,” Ball said.

Experts say the growing use of AI in cybersecurity could create a transitional period of heightened digital risk before stronger defences are developed globally.

Interswitch, an integrated payments and digital commerce company, has announced the induction of the third and largest cohort of developer interns into its Developer Academy, reinforcing its long-standing commitment to building world-class technology talent and strengthening Africa’s digital ecosystem.

Selected from a pool of over 20,000 applications, the new cohort emerged through a rigorous multi-stage process involving technical assessments, and interviews. Their induction into the Developer Academy highlights both the scale of interest in software engineering opportunities in Nigeria and Interswitch’s role in nurturing the next generation of highly skilled technology professionals.

Commenting on the initiative, founder and Group Chief Executive Officer, Interswitch, Mitchell Elegbe, emphasised the importance of taking a long-term, ecosystem-driven approach to talent development.

“At Interswitch, we have always believed in the capacity to see beyond the immediate challenges and focus on long-term impact. While the migration of skilled talent remains a reality, our approach is to actively shape the outcomes by building a strong and sustainable pipeline of technology professionals.

“We are therefore committed to equipping individuals with the capabilities to contribute meaningfully to the broader technology ecosystem, locally and globally, not just for our own needs at Interswitch. In doing so, we are not only strengthening the industry but also reinforcing Nigeria’s position as a source of globally competitive engineering talent,” Elegbe said.

The 9-month programme brings together talents across key engineering tracks, including Backend Development, DevOps, Mobile Development, Frontend Engineering, and Quality Assurance.

Designed as an intensive and structured learning experience, the Developer Academy combines theoretical instruction with real-world application, equipping participants with the skills required to thrive in an increasingly global and competitive technology landscape.

Also commenting, Group Chief Human Resources Officer, Interswitch, Franklin Ali, said: “The Developer Academy reflects our long-term commitment to building talent at scale. We are equipping these young professionals not just with technical skills, but with the mindset, discipline, and adaptability required to thrive in diverse environments.

“Whether they build their careers within Interswitch, contribute to the local ecosystem, or explore global opportunities, they represent the strength and potential of Nigerian talent and carry forward the standard of excellence we are committed to building.”

Paradigm Initiative (PIN), a pan-African organisation focused on digital rights and inclusion, has released its 2025 Annual Impact Report, highlighting major achievements across Africa and other parts of the Global South.

PIN

The report showed that PIN recorded a consolidated media reach of 3.07 billion in 2025, alongside a digital inclusion reach of 1,830 beneficiaries across five major initiatives.

It also disclosed that the organisation trained 282 stakeholders through cyber law engagements, hosted 55 events, and handled 11 strategic litigation cases, including one landmark privacy ruling.

According to the report, PIN expanded its digital literacy and skills development programmes through its Life Skills, ICTs, Financial Literacy and Entrepreneurship (LIFE) Legacy Programme, delivering training across 13 African countries.

The countries include Nigeria, Ghana, Kenya, Cameroon, Senegal, Tanzania, Uganda, and Zambia, among others.

The programme targeted young people, women, educators, and underserved communities, with a focus on strengthening digital skills, employability readiness, and online rights awareness.

In addition, PIN said it trained over 250 judges, prosecutors, and law enforcement officers across Nigeria, Ghana, and Zambia through its Stemming the Tides of Abuse in Nigeria’s Digital System (STANDS) programme and related cyber law trainings.

The organisation said the trainings were beginning to influence judicial and law enforcement practices in participating countries.

Executive Director of PIN, Gbenga Sesan, said 2025 demonstrated what could be achieved through commitment to impactful work despite operational challenges.

“Even though 2025 tested that conviction with the threats that accompanied it, digital expansion continued at pace.

“2025 was also a year that reminded us of what is possible when people commit to doing much-needed work well,” Sesan said.

The report also examined broader digital rights trends across Africa and the Global South, warning of a widening gap between rapid digital expansion and the protection of fundamental human rights.

According to PIN, 2025 witnessed an increase in vague cybercrime and cybersecurity laws, heightening risks of surveillance, censorship, and disproportionate enforcement.

It added that internet shutdowns, online harassment, and platform restrictions continued to shrink civic space, particularly during elections and periods of political tension.

“Governments accelerated the rollout of digital infrastructure while, in too many cases, sidelining the rights frameworks that should govern it.

“New cybercrime laws were passed in the dead of night. Internet shutdowns were deployed as tools of political convenience.

“Journalists, human rights defenders, women, and young people continued to bear the heaviest costs of a digital environment that treats rights as a footnote,” Sesan added.

Despite sector-wide challenges, the organisation said 2025 remained a year of sustained impact, supported by its team, sponsors, board members, partners, and supporters across the continent.

PIN reaffirmed its commitment to promoting a rights-based digital future where innovation is balanced with inclusion, safety, privacy, and freedom of expression.