Hackers Used an AI-Discovered Zero-Day to Bypass Two-Factor Authentication

Google reported that it identified an unknown threat actor using a zero-day exploit likely developed with artificial intelligence. The vulnerability, implemented in Python, enabled bypassing two-factor authentication on a popular open-source, web-based system administration tool when valid user credentials were available. The tool was not named. Google described the activity as a mass vulnerability exploitation operation and worked with the affected vendor to fix the flaw.