Threat Actors Use AI to Automate 0-Day Discovery and Exploitation at Machine Speed

This report documents the rise of AI-orchestrated attacks, highlighting the GAMECHANGE campaign (mid‑Sept 2024)—a Chinese state‑linked espionage operation that used a Python/PE malware which queried an external LLM for real-time commands to collect and exfiltrate documents—alongside other AI-powered malware families, and outlines detection and containment recommendations as attackers leverage LLMs to automate zero‑day discovery and runtime payload generation.