X-Risk Daily

On 11 May, Google's Threat Intelligence Group revealed it had intercepted what it described as the first confirmed real-world deployment of an AI-developed zero-day exploit by criminal hackers. The detection marks a watershed moment in offensive cyber capabilities: the transition from theoretical demonstrations of AI-assisted vulnerability discovery to operational use by malicious actors seeking financial gain.

The exploit, a Python script designed to bypass two-factor authentication in a popular open-source web administration tool, bore unmistakable hallmarks of machine generation. CyberScoop reported that Google researchers identified documentation strings, highly annotated code, and a hallucinated CVSS severity score—artifacts inconsistent with human developers. The vulnerability itself stemmed from a high-level logic flaw: developers had hardcoded a trust exception that contradicted the application's authentication enforcement, precisely the kind of semantic error that frontier language models are increasingly adept at detecting. According to The Register, a prominent cybercrime group had partnered with other actors to plan a mass exploitation campaign, but Google's disclosure to the vendor likely disrupted the operation before it gained traction.

The incident underscores mounting concerns about the asymmetry AI introduces to cybersecurity. John Hultquist, chief analyst at Google's Threat Intelligence Group, told reporters that "for every zero-day we can trace back to AI, there are probably many more out there." Google's broader report documented parallel efforts by state-sponsored actors: SecurityWeek noted that North Korea's APT45 has been using AI to recursively analyse thousands of CVEs and validate proof-of-concept exploits, while Chinese groups have deployed persona-driven jailbreaking techniques to augment vulnerability research on embedded devices. The report also described malware families using AI-generated decoy code to evade detection and Android backdoors leveraging the Gemini API to autonomously navigate infected devices.

The timing is significant. In April, Anthropic delayed the rollout of its Mythos model over concerns that it could be misused to identify decades-old vulnerabilities. The Google detection suggests that window between capability demonstration and malicious deployment may be narrower than anticipated. While Google emphasised that neither Gemini nor Mythos was used in this case, the exploit's existence confirms that AI tools are already lowering the barrier for sophisticated attacks. As CSO Online observed, AI reasoning capabilities have advanced to the point where models can discover high-level logic flaws rather than just memory corruption bugs—expanding the attack surface and validating predictions that AI will asymmetrically advantage attackers over defenders in the vulnerability discovery race.

Recursive Superintelligence emerged from stealth on 13 May with $650 million in funding at a $4.65 billion valuation, marking one of the most explicit attempts yet by a frontier AI company to build recursively self-improving systems. Founded by former researchers from OpenAI, Google DeepMind, Meta AI, Salesforce, and Uber AI — including former Salesforce chief scientist Richard Socher — the startup has organised its entire business model around recursive self-improvement as its core commercial thesis, rather than treating it as a research tool to support conventional product development.

The funding round was led by GV and Greycroft, with strategic participation from Nvidia and AMD, whose involvement signals that chipmakers view recursive self-improvement as a near-term compute customer rather than a theoretical curiosity. The company has outlined a staged roadmap beginning with a system possessing the capabilities equivalent to "50,000 doctors" to automate AI scientific research, followed by a "Level 1" autonomous training system with a public launch targeted for mid-2026. The round was described as heavily oversubscribed, reflecting venture capital's increasing willingness to place billion-dollar bets on elite AI research talent before product release — the company currently employs fewer than 30 people across offices in San Francisco and London.

What distinguishes Recursive Superintelligence from major laboratories like OpenAI, Anthropic, and Google DeepMind is that none of those organisations has structured an entire company around recursive self-improvement as its primary objective. While Anthropic has said that the majority of its code is now written by Claude, established labs remain focused on selling models and API access. Recursive is betting that the self-improvement loop itself is the product. The company's approach draws on "open-endedness," a concept borrowed from biological evolution in which systems continuously generate new environments and challenges rather than training toward a single fixed objective. The viability of this approach remains genuinely uncertain: whether recursive self-improvement produces runaway acceleration or converges on diminishing returns as each cycle yields smaller gains is an open empirical question.

The company's unusually explicit framing — its name directly references superintelligence and recursive self-improvement — stands in contrast to most AI labs, which tend to avoid such terminology even when pursuing similar technical objectives. This reflects what many AI safety researchers consider a critical risk threshold: systems capable of autonomously enhancing their own capabilities without human oversight. Anthropic co-founder Jack Clark has estimated a roughly 60% probability that a system capable of training a more powerful successor on its own will exist by the end of 2028, with a 30% chance by 2027. The successful fundraising at a multi-billion-dollar valuation demonstrates sustained investor appetite for pursuing recursive capability amplification despite these concerns.

In related developments, Forbes reported that xAI co-founder Igor Babuschkin is in talks to raise up to $1 billion for a separate AI research startup called River AI at a valuation of up to $5 billion, with General Catalyst reportedly in talks to lead the round. River AI was incorporated in Nevada on 20 April 2026, and Babuschkin is said to be contributing up to $100 million of his own capital. The fundraising activity underscores the continuing flow of capital toward researcher-led "neolabs" with no immediate product plans, a trend that has intensified competition for talent and compute infrastructure across the AI research ecosystem.

On 16 May 2026, the US Department of Justice announced the arrest of Mohammad Baqer Saad Dawood al-Saadi, a 32-year-old senior commander of Kata'ib Hizballah, an Iraqi militia designated as a foreign terrorist organization. Al-Saadi faces six counts of terrorism-related offenses for his alleged role in coordinating nearly 20 attacks across the United Kingdom, Europe, Canada, and planned operations inside the United States. The criminal complaint, unsealed in Manhattan federal court, marks what prosecutors describe as one of the highest-level Iranian proxy figures known to have been arrested by the United States since the war began.

According to court documents, al-Saadi operated through a front group called Harakat Ashab al-Yamin al-Islamiya, which emerged in March 2026 and claimed to be a new terrorist organization. The complaint alleges this was merely a component of Kata'ib Hizballah, enabling the group to activate cells across Europe with suspicious speed. Al-Saadi allegedly posted incendiary messages on social media in February calling on followers to kill supporters of America and Israel, and on 9 March—the day of the first attack—he called on followers to engage in jihad. The attacks that followed included firebombings targeting American banks in Amsterdam and attempted bombings in Paris, arson attacks on synagogues in Belgium, Germany and the Netherlands, a March shooting at the US consulate in Toronto, and a series of attacks in London, including an April stabbing that seriously wounded two Jewish men, one a dual US-British citizen.

The case took a more ominous turn when federal authorities disrupted al-Saadi's alleged attempts to orchestrate attacks on US soil. Court filings reveal that al-Saadi, believing he was communicating with a Mexican cartel member, arranged with an undercover FBI agent to bomb a prominent New York synagogue and target Jewish centers in Los Angeles and Scottsdale, Arizona. He reportedly agreed to pay $10,000 for the New York attack and sent $3,000 in cryptocurrency as a down payment, insisting the operation be filmed. Al-Saadi was apprehended in Turkey and transferred to US custody without extradition proceedings, according to his defense attorney Andrew Dalack, who told the court his client considers himself a political prisoner and prisoner of war due to his past association with Qasem Soleimani, the Iranian general killed in a 2020 US drone strike.

The arrest underscores what analysts view as a significant expansion of Iranian proxy operations beyond the Middle East. While Kata'ib Hizballah has long served as an armed proxy for Iran's Revolutionary Guard in Iraq and Syria, it has historically not organized attacks outside the region. The complaint notes that Harakat Ashab al-Yamin al-Islamiya was able to activate terrorist cells across Europe essentially overnight, a capability suggesting sophisticated coordination with Iran's Islamic Revolutionary Guard Corps-Quds Force, which has provided extensive training, funding, and intelligence to Kata'ib Hizballah. The case now forces European governments to confront what The Jerusalem Post characterizes as the unmasking of plausible deniability—the revelation that attacks previously attributed to an obscure new group were in fact directed by a well-known Iranian proxy operating with state backing. Al-Saadi appeared in court on 15 May, was ordered detained pending trial, and faces a potential life sentence if convicted.

Chief of staff Jim Traficant was also ousted, according to STAT News. The departures followed Commissioner Marty Makary's resignation days earlier, leaving the agency without permanent leadership across its most critical positions.

Høeg's removal was particularly abrupt. Two FDA officials arrived at her office and told her she could either resign or be terminated; Høeg refused to resign. The officials told her the decision came from someone "way above their pay grade," she told MD Reports. She was the fifth person to run the Center for Drug Evaluation and Research in the 15 months of President Donald Trump's second term. Her rapid rise through the agency was engineered by Makary, who quickly promoted her from serving as his special assistant to overseeing the agency's largest center; FDA center directors are typically career agency scientists with decades of experience, and Høeg had no previous government or management experience.

The FDA now operates without permanent leadership across critical positions: no permanent commissioner, deputy commissioner, or heads of its two major regulatory centres. Michael Davis will replace Høeg at the Center for Drug Evaluation and Research and Karim Mikhail will replace Szarama at the Center for Biologics Evaluation and Research, according to CNBC. The two divisions are responsible for regulating prescription drugs, including pills and vaccines. Szarama had only assumed the biologics role in late April, replacing Vinay Prasad, who left the agency after a tumultuous tenure during which he issued a series of controversial decisions on rare disease drugs and vaccines, reported STAT.

The rapid turnover leaves the FDA's drug approval and vaccine oversight functions in institutional disarray at a time when the agency plays a crucial role in pandemic preparedness, emerging biotechnology regulation, and drug safety. The absence of stable leadership raises questions about the agency's capacity to respond effectively to biosecurity threats or coordinate responses to novel pathogens. While the immediate cause of the departures remains unclear, the pattern suggests either significant internal conflict or external pressure that has destabilised the regulatory apparatus meant to safeguard public health during biological crises. Kyle Diamantas, who had been FDA deputy commissioner for food, replaced Makary, who left after weeks of clashing with top White House and health advisers over a series of decisions that drew criticism regarding drug approvals and other areas, according to Reuters.