Google reports it has identified and stopped a zero-day exploit developed with AI, marking a first. This vulnerability was intended for a mass exploitation event to bypass two-factor authentication on an unnamed open-source system administration tool.
The public release of ChatGPT revealed how easily generative AI can produce vast amounts of human-like text. Criminals quickly leveraged this capability, using large language models to generate malicious emails, including both untargeted spam and more sophisticated scams.
Cyberscammers in Cambodia are bypassing banking security, including video "liveness" checks, using illicit tools sold on Telegram. They manage to trick banking apps into opening accounts with fake photos and videos.