Google: AI-assisted zero-day attacks found capable of bypassing two-factor authentication

Techub News, according to crypto.news, the Google Threat Intelligence Group stated that it has discovered a zero-day attack that may have used artificial intelligence for vulnerability discovery and weaponization. The attack targeted a popular management tool and could bypass two-factor authentication after obtaining valid credentials.

The team stated that attackers need to first obtain valid credentials to exploit this logic error. Google noted that it is "highly confident" that the attackers used an AI model to assist in development, and that the relevant scripts contained educational annotations consistent with large language model characteristics. The company also stated that such threats pose a particular risk to crypto accounts and wallet services.