Security researchers have been warning for years that AI would eventually make its way into the hands of hackers looking to build more sophisticated attacks. Google’s Threat Intelligence Group (GTIG) just confirmed it’s no longer a warning . The group says it has discovered the first known AI-developed exploit used in a real-world attack campaign. The exploit targeted a popular open-source web-based administration tool. Specifically, it was a Python script that let attackers bypass two-factor authentication once they had valid login credentials. A group of prominent cybercriminals built it and planned to use it in a mass exploitation campaign, but GTIG caught it first, alerted the vendor, and a patch went out before any damage could be done. Google says it doesn’t believe its Gemini AI was involved. But the code itself gave the AI connection away. The script was full of detailed educational comments and used a clean, textbook-style Python format. It even included a hallucinated severity score.…