Google Introduces Project Naptime for AI-Powered Vulnerability Research

Google Project Zero's Project Naptime is a model- and backend-agnostic framework that enables an AI agent to mimic human vulnerability research workflows using tools (Code Browser, sandboxed Python for fuzzing, Debugger, Reporter). The report highlights improved capability to identify and reproduce memory corruption and buffer overflow issues, showing markedly higher scores on the CYBERSECEVAL 2 evaluation, but it describes research and tooling rather than an active exploitation or breach.