Security reports or announcements from AI developers

Google's AI Tool Big Sleep Discovers First Real-World Zero-Day Vulnerability in SQLite Database Engine with Project Zero Collaboration

Nov 4, 2024, 04:00 PM

Google has announced that its AI tool, Big Sleep, has discovered a previously unknown and exploitable memory flaw in the widely used SQLite database engine. This marks the first instance of an AI agent identifying a real-world vulnerability before its public release. The discovery was made in collaboration with Google's Project Zero team and DeepMind, utilizing the Gemini 1.5 Pro model. This breakthrough highlights the potential of AI in enhancing cybersecurity by proactively detecting vulnerabilities that traditional methods may overlook. The identification of this zero-day vulnerability underscores the evolving role of AI in safeguarding software systems against emerging threats.