AI Speeds Up Attacker Retries, SOC Handoffs Lag

Google's Threat Intelligence Group reported in May 2026 that cyber crime actors built working exploits for a two-factor bypass in an open-source administration tool, assessing with high confidence that an AI model supported both discovery and exploit development. GTIG worked with the vendor on disclosure and disrupted the activity. The finding shows AI compressing attacker research and troubleshooting, while defenders still lose context at every handoff.