Descriptions:
In a May 12, 2026 livestream, Matthew Berman covers what he argues is a qualitative inflection point in AI-enabled cybersecurity threats, anchored by a report from Google’s Threat Intelligence Group documenting the first confirmed instance of a threat actor deploying an AI-developed zero-day exploit in active use. Zero-day exploits are typically treated as high-value commodities — hoarded by state actors and criminal groups and used sparingly because deployment immediately exposes them to patching. The confirmed use of an AI-discovered zero-day in the wild suggests the calculus around these vulnerabilities is shifting as AI accelerates their discovery.
Berman frames this within a broader pattern of AI-assisted attack escalation: more sophisticated phishing, AI-generated deepfake impersonation calls targeting individuals and families, and automated vulnerability scanning that lowers the skill threshold for malicious actors. He references Pindrop Security, whose CEO appeared on a prior episode, as an example of defensive AI built specifically to detect synthetic voice and deepfake attacks in real time — framing the situation as an arms race between offensive and defensive AI capabilities.
Practical guidance includes creating a shared passphrase with family members as a low-tech defense against deepfake impersonation, particularly for older relatives who may be targeted via FaceTime or phone calls. Berman emphasizes that the tools currently in malicious hands lag the frontier of AI capability, making near-term escalation a serious concern for security teams and individuals alike. The livestream format means the content is interspersed with audience Q&A, but the core sourced claims are grounded in Google’s own threat intelligence reporting.
📺 Source: Matthew Berman · Published May 12, 2026
🏷️ Format: Livestream







