Google's TIG reports the first confirmed instance of "prominent cybercrime threat actors" using AI to find and weaponize a zero-day in a web-based admin tool (Dustin Volz/New York Times)