Criminal hackers used AI to build a working zero-day exploit, targeting a 2FA bypass in an open-source tool.