An undercover Google analyst infiltrated a notorious supply-chain hacking gang

Google infiltrated TeamPCP's internal chats and a server holding a large trove of stolen credentials from what the group called a major supply-chain compromise; rather than contacting each victim directly, Google notified cloud providers and victims to revoke access, and also obtained and tested an AI-developed zero-day exploit that bypassed two-factor authentication in widely used login software, which was reported to the vendor and patched.