No AI is needed for that. The Morris Worm was 38 years ago. Various MS Worms were as common as MS Windows 20-ish years ago. Anyone who's glanced over web server logs in the WordPress era knows about automated scanning for its myriad flaws.

Though one could argue that "AI" is needed, currently, for an editor to decide that a story about a hack is worth publishing.

(Yes, current-day AI's do shift the equilibrium. Somewhat. The French fridges would not be news if the situation was anywhere near as bad as the doomsayers seem eager to proclaim.)