AI-Driven Zero-Day Discovery Linked to 2FA Target, Google Says

TL;DR
Google’s Threat Intelligence Group says a prominent cybercrime group used an AI-assisted zero-day in a Python script to target a popular open-source web-based system administration tool, potentially bypassing two-factor authentication; Google and the vendor coordinated a disclosure and patch, noting Gemini was not involved and that the attackers likely leveraged AI to discover and weaponize the flaw, amid broader debates around Mythos hype.
Topics:technologycybersecurity#artificial-intelligence#cybersecurity#google#two-factor-authentication#zero-day
- Google Says It Found Evidence of Hackers Using AI to Discover a Zero-Day Vulnerability Gizmodo
- Google Says Criminal Hackers Used A.I. to Find a Major Software Flaw The New York Times
- Google says it likely thwarted effort by hacker group to use AI for 'mass exploitation event' CNBC
- Google Says Hacker Used Mythos-Like AI for Software Tool Exploit Bloomberg.com
- Google says hackers used AI to develop a major security flaw Politico
Want the full story? Read the original reporting
Read on Gizmodo