Threat Intelligence Articles

Google Cloud

031 min read

Security•2026-05-11

GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access

This report from Google Threat Intelligence Group (GTIG) documents how adversaries are increasingly leveraging AI models to accelerate their attack capabilities across multiple stages of the threat lifecycle.

Threat Intelligence

Threat Intelligence Articles

Related Tags

Project Glasswing: what Mythos showed us

Welcome to BlackFile: Inside a Vishing Extortion Operation

GTIG AI Threat Tracker: Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access

Snow Flurries: How UNC6692 Employed Social Engineering to Deploy a Custom Malware Suite

Defending Your Enterprise When AI Models Can Find Vulnerabilities Faster Than Ever

The German Cyber Criminal Überfall: Shifts in Europe's Data Leak Landscape

vSphere and BRICKSTORM Malware: A Defender's Guide

North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

M-Trends 2026: Data, Insights, and Strategies From the Frontlines

The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors

Ransomware Under Pressure: Tactics, Techniques, and Procedures in a Shifting Threat Landscape

Proactive Preparation and Hardening Against Destructive Attacks: 2026 Edition

Look What You Made Us Patch: 2025 Zero-Days in Review

Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit

Evolving Cloudflare’s Threat Intelligence Platform: actionable, scalable, and ETL-less

Introducing the 2026 Cloudflare Threat Report