This deep dive tracks the rapid evolution of cyber adversaries from early prompt-assisted coding to fully autonomous, multi-agent frameworks capable of executing complex cloud intrusions in under six hours. We examine how threat actors are weaponizing developer supply chains through trojanized Model Context Protocol (MCP) servers, manipulating AI coding assistants, and targeting enterprise AI assets through model distillation and compute hijacking ("LLMJacking"). Finally, the episode explores emerging AI-driven defensive innovations, including Google's autonomous threat defense, Gemini 3.8 Flash Cyber, and proactive vulnerability discovery agents like Big Sleep and CodeMender.
Sept 2026 - GTIG AI Threat Tracker: https://cloud.google.com/blog/topics/threat-intelligence/from-prompting-to-autonomy-the-evolution-of-adversarial-ai
May 2026- GTIG Ai Threat Tracker: https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access
Feb 2026 - GTIG Ai Threat Tracker: https://cloud.google.com/blog/topics/threat-intelligence/distillation-experimentation-integration-ai-adversarial-use
Nov 2025- GTIG Ai Threat Tracker: https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools
Jan 2025 - GTIG Ai Threat Tracker: https://cloud.google.com/blog/topics/threat-intelligence/adversarial-misuse-generative-ai
GTIG 2024 Zero Days: https://www.podbean.com/ew/pb-ficf2-189625f
Sponsors:
No comments yet. Be the first to say something!