AOMEI Backupper update servers hijacked to deliver a backdoor
Google’s threat intel group confirmed three tampering windows of ten, six, and five minutes between April and July.
1
Stories per day · 30 days
3 RSS
11 stories, newest first · one card per story
Stories tagged #gtig
Google: Vulnerability disclosures double to 10,000 per month as AI fuels exploitation
Google says vulnerability disclosures doubled to 10,740 a month as AI accelerates n-day exploitation.
Vulnerability Discovery and Exploitation Trends in the AI Era
Google Threat Intelligence reports monthly CVE disclosures doubled to 10,740 by August 2026, exploited vulnerabilities rose to 18 monthly, and AI-assisted finds skew toward RCE.
AI Malware Keeps Changing Its Code to Break Traditional Signature-Based Detection
Google's GTIG documents AI-enabled malware PROMPTFLUX and PROMPTSTEAL that query LLMs at runtime to rewrite code and evade signature-based detection.
4
One runaway AI agent racked up a $50,000 cloud bill
Mandiant's AI Risk and Resilience report details prompt injection, AI supply chain compromises, agent abuse, and a runaway agent that accrued $50,000 in cloud charges.
11
Threat actors are coming for your AI assets to operationalize their use of AI
Google GTIG reports espionage and crime groups stealing AI models, prompts, and API credentials, plus distillation campaigns and agentic AI attack automation.
AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns
Google's Threat Intelligence Group warns AI now gives lesser-resourced criminal and nation-state attackers nation-state-level speed and scale, citing TeamPCP, Basin Castle, APT42, and APT24 usage.
14
Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution
CrowdStrike links previously unseen Slim Spider group to crypto custody secret theft at Brazilian financial institutions since March 2026.
1
Threat actors are giving AI agents a bigger role in cyberattacks
Google Threat Intelligence's Q3 2026 tracker shows threat actors using AI agents for autonomous credential harvesting, including a six-hour campaign compromising thousands of credentials.
8
Hackers build AI frameworks for widescale credential theft
Google GTIG details threat actors using autonomous multi-agent AI frameworks to automate attacks, including a six-hour credential-harvesting campaign and a 23,800-secret Recon panel.
3
Srsly Risky Biz: Data Theft Extortion Is Booming! Hooray!
Google's Threat Intelligence Group reports data theft extortion is surging, with Silent Ransom extracting $10M and $18M from two law firms and BlackFile taking $10M.
4