Researchers uncover security flaw in Google AI chatbot
A landmark GTIG report documents the first known case of criminals using AI to discover and weaponize a zero-day exploit, raising fresh questions about the security of AI systems themselves
+15.1% (FY ended 2025-12-31 vs FY ended 2024-12-31) 10-K
Annual net income
132,170,000,000 USD (FY ended 2025-12-31, attributable to the company) 10-K
Annual operating margin
32.0% (FY ended 2025-12-31)
Forward P/E
Unavailable: no dated forecast source
Gloria daily close for session Oct 27, 2026. Market cap and trailing P/E use this close with the SEC share total and trailing diluted earnings, each dated next to its figure. Annual revenue, revenue growth, net income and margin show their own fiscal period and link the 10-K. Current context may postdate this article.
Alphabet Inc. and its peers
Company
Price
Market cap
P/E (trailing)
Forward P/E
Annual revenue (USD)
Annual revenue growth
Annual net income (USD)
Operating margin
Alphabet Inc.
GOOGL · Price dated Oct 27, 2026 · tokenized GOOGLx
3,333,751,000FY ended 2025-12-31, attributable to the company · 10-K
75.8%FY ended 2025-12-31
Missing figures stay unavailable. Forward P/E requires a dated source. Annual revenue, revenue growth, net income and margin come from each company's own 10-K, in US dollars, and each row shows that fiscal year. Revenue growth compares the fiscal year with the prior year stated in the same 10-K. Net income is the full year amount attributable to the company, or available to common stockholders where the filing states only that, or consolidated net income. Each row names its basis. Trailing P/E reads "Not meaningful" when the dated trailing diluted EPS is a loss or zero. An operating margin appears only when the filing states both the operating income and the revenue for the same year.
Sources: SEC filings, Gloria daily closes and CoinGecko. Oldest record refresh: Oct 27, 2026, 8:48 PM EDT. Refresh is not a price or filing date. Each row shows its price date and its annual fiscal period. Peers use industry code and company size, or editorial selection. Market cap multiplies that row price by the company share total the latest SEC filing states for every share class together. Trailing P/E divides it by trailing diluted earnings from SEC filings. Rolled earnings per share are approximate because share counts can change between periods. Both appear only when the SEC data carries its date, so they are estimates at one price date, not synchronized filing valuations. Not investment advice.
Token vs underlying stock
Current comparison for GOOGL. Historical observations may postdate this article.
Split-adjusted regular-session stock closes from the existing Gloria shared history, paired only with an observed token price within 45 minutes of 16:00 New York time. Up to 60 matched sessions. No interpolation or missing-date fill. Weekends and known early closes are omitted. Token units are not adjusted for issuer multipliers or dividend treatment. This compares quoted prices, not fair value, executable premiums or arbitrage returns. Solid line: token. Dashed line: stock. Exact quote times and values appear below. Historical observations. Retrieval refers to the token source. Token quote times use UTC. The fixed cohort shows its oldest member fetch.
Alphabet token vs Alphabet stock: exact source values
Quoted token and share units can have different rights, multipliers and dividend treatment. This is not an executable premium or arbitrage signal.
The line between AI as a productivity tool and AI as a weapon just got a lot blurrier. On May 11, 2026, Google’s Threat Intelligence Group published a report documenting something the security community had long feared but never confirmed: a criminal actor using an AI model to discover a zero-day vulnerability and then build a working exploit around it.
Zero-days, which are software flaws unknown to the vendor and therefore unpatched, have historically required deep human expertise to uncover.
What actually happened
The exploit targeted a Python script tied to two-factor authentication bypass in a widely used open-source system administration tool.
Google stated it had “high confidence” that an AI model played a central role in both discovering the flaw and developing the weaponized code. That confidence assessment came from analyzing the code structure, comments, and other technical indicators left behind in the exploit.
Advertisement
One important clarification from Google: the AI model used by the attackers was not Gemini, the company’s own chatbot product.
The planned mass exploitation was stopped before it could be widely deployed.
AI, tech, and the markets they move—in one daily briefing.
Daily. Free. Join 34,000+ readers across crypto, finance, and policy.
Gemini’s own vulnerabilities are a separate problem
In September 2025, security firm Tenable disclosed three vulnerabilities in Gemini related to private data exfiltration. Those flaws were later remediated, but the disclosure window meant that sensitive information processed through Gemini could, under certain conditions, have been siphoned out without user awareness.
Then in March 2026, Palo Alto Networks reported CVE-2026-0628, a high-severity privilege escalation vulnerability in the Gemini side panel built into Chrome.
Google did move to expand its AI Vulnerability Reward Program in October 2025, creating financial incentives for outside researchers to find and report AI-related security issues.
What this means for the broader tech and crypto landscape
There are no direct crypto market implications documented in connection with these specific incidents. No tokens, no protocols, no blockchain infrastructure was named as a target or a casualty.
The specific exploit documented by GTIG targeted a system administration tool’s 2FA mechanism. Two-factor authentication is a primary security layer for virtually every centralized crypto exchange.
Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.
AI, tech, and the markets they move—in one daily briefing.Daily. Free. Join 34,000+ readers across crypto, finance, and policy.
Free daily briefing
Crypto Briefing Pro
The news about what you hold
Follow your stocks and crypto. Read the news about them from hundreds of publishers in Pro.
