AI threat intelligence
Also called: threat intelligence · AI threat reports
AI threat intelligence is reporting on how real attackers use, target or abuse AI systems, drawn from incidents, provider abuse reports and security vendors' telemetry. It separates what is happening in the wild from what is only shown in research.
How it works
Sources include AI providers' reports on accounts they banned, security firms tracking campaigns that use AI tools, and vulnerability trend analyses of AI frameworks. Good reports name the actor, the technique and the evidence.
How to defend
Use threat reports to prioritise: patch the AI frameworks and products being exploited now, and plan for the techniques attackers are actually adopting.
Real cases 8 stories
INFO
Attack · Cisco Talos
A3 malware: Talos measures prompt injection aimed at AI triageFour malware families embed natural-language instructions to steer AI malware triage toward a benign verdict, Cisco Talos reports. Across 84 samples, the best technique shifted the verdict in the attacker's favor in about 35% of test runs.
INFO
Incident · ReversingLabs
ReversingLabs: behavior beat hashes on an AI-assisted spy campaignReversingLabs says it classified two GTG-20006 implants as malicious in August, two months before Anthropic's September report named the actor, and that behavior-based hunting held up while Claude was used to rebuild detected files.
INFO
Research · OWASP GenAI Security Project
OWASP GenAI: a Q3 exploit roundup mapped to its two Top 10 listsThe OWASP GenAI Security Project published a Q3 2026 roundup on October 8 that catalogues nine AI security incidents from July to September and maps each one to its LLM Top 10 2026 and Agentic Top 10 2026 risks.
HIGH
Incident · Black Lotus Labs
PoeLLM: a cryptomining botnet feeds on exposed LiteLLM serversPoeLLM is a cryptomining botnet that breaks into internet-facing AI services, which Black Lotus Labs says has reached more than 3,400 servers since April 2026. Infected hosts read their next command server from a poem hosted on GitHub.
INFO
Incident · CrowdStrike
ARTEX: attackers paired an agentic pentest tool with Claude CodeARTEX, an open-source agentic pentesting tool developed in China, was used alongside Claude Code and DeepSeek against South Korean financial organizations in late September 2026, CrowdStrike Intelligence reports.
INFO
Incident · SOCRadar
CyberXero: an access broker ran 51 Claude Code agents against UkraineCyberXero is a Russian-speaking initial access broker driving 51 specialized Claude Code agents. SOCRadar found its exposed working directory and confirmed theft of over 628,000 records from four Ukrainian organizations.
INFO
Research · Google Threat Intelligence Group
Google GTIG: half of 2026 AI flaws hit agent orchestrationGoogle Threat Intelligence Group tracked 2,076 vulnerabilities in AI software from January 2025 to August 2026, more than 1,500 of them in 2026, and says agent orchestration frameworks account for half of them.
INFO
Incident · Google Threat Intelligence Group
Google GTIG: attackers used AI agents to run a credential campaignGoogle Threat Intelligence Group reports a threat actor who planned, built and ran an agent-enabled mass credential harvesting campaign in under six hours. GTIG says it has not yet seen fully autonomous attack pipelines in the wild.