Google Threat Intelligence Group (GTIG), working with Google DeepMind, says cyber adversaries have moved beyond AI experimentation and are now embedding artificial intelligence directly into real operations. The 2026 update to its earlier research finds that AI is not inventing brand-new attack categories, but it is dramatically amplifying scale, speed and precision.
Large language models are shrinking the distance between intent and execution. In reconnaissance, attackers can process enormous volumes of public information to map staff structures, suppliers and weak points with remarkable accuracy.
In social engineering, AI builds convincing narratives. Messages, résumés and even recruiter conversations are tailored so well that they slip past human suspicion. Meanwhile, in malware development, generative systems help debug code, suggest bypass methods and rapidly create new variants.
Investigators are now seeing threats that call AI services during execution. These programs dynamically generate instructions, rewrite their own code and automate data theft, making signature-based detection far less effective.
Groups linked to APT28 and others are testing AI to automate profiling, translation, and intelligence packaging. The result is more targeted, believable and persistent campaigns aligned with geopolitical aims.
GTIG highlights a spike in “distillation” operations, where attackers bombard systems with huge volumes of prompts to replicate proprietary logic. Instead of stealing databases, adversaries attempt to clone intelligence itself.
Google’s message to enterprises is blunt: governance models must evolve. AI agents should be treated as identities with tightly scoped privileges, and defensive tools must operate autonomously. In an era where attackers iterate in seconds, human-only response cycles are no longer enough.
If AI is the new engine of productivity, it has also become the accelerator for cyber risk.
