TLDR Tech / InfoSec
GTIG AI Threat Tracker: From Prompting to Autonomy – The Evolution of Adversarial AI
Google's GTIG reports that threat actors have graduated from basic prompting to agentic AI workflows that autonomously manage scanning pipelines, resolve errors, and execute multi-stage attacks with minimal human oversight, compressing response windows from days to hours. For instance, groups like UNC6780 exploit the AI supply chain by stealing GitHub Actions tokens to sign malicious packages by tricking LLMs, state-sponsored groups use AI across the full attack lifecycle from reconnaissance to post-exploitation, and financially motivated actors built credential-harvesting agents that stole thousands of secrets in under six hours using only AI coding tools and markdown playbooks.
Read the full story