Google: Hackers used AI to develop zero-day exploit for web admin tool

BleepingComputer roundup (May 7–11, 2026) reports multiple high-impact incidents: Google Threat Intelligence says a zero-day exploit for a popular open‑source web administration tool was likely generated using AI and seen in the wild; CISA ordered U.S. federal agencies to urgently patch an Ivanti Endpoint Manager Mobile (EPMM) zero‑day being exploited; and a new Linux local‑privilege zero‑day dubbed “Dirty Frag” provides root on major distributions. Active malware and compromise campaigns were also detailed — TrickMo Android banker now using the TON blockchain for covert C2, a malvertising/ab用