• CloudCISO Perspectives: New AI threats report: Distillation, experimentation, and integration chief analyst, Google Threat Intelligence Group The latest on security from Google Cloud’s Office of the CISO, twice a month. • Welcome to the first Cloud CISO Perspectives for February 2026. • Today, John Hultquist, chief analyst, Google Threat Intelligence Group, explains the research detailed in our newest AI Threat Tracker report. • As with all Cloud CISO Perspectives, the contents of this newsletter are posted to theGoogle Cloud blog. • If you’re reading this on the website and you’d like to receive the email version, you cansubscribe here. • New report on AI threats: Distillation, experimentation, and continued integration By John Hultquist, chief analyst, Google Threat Intelligence Group Monitoring the adoption and abuse of AI has become a major focus of Google Threat Intelligence Group.

Article Summaries:

  • Google’s Threat Intelligence Group released a new AI Threat Tracker report highlighting how adversaries are increasingly exploiting artificial intelligence. The study documents rising model‑extraction attacks that steal training data, agentic capabilities used by state‑backed groups such as APT31 for automated reconnaissance, and AI‑augmented operations that streamline phishing and post‑compromise activities. The report stresses that AI is a new attack surface, urging organizations offering AI services to monitor API usage for extraction patterns. By cataloguing five misuse categories, the report aims to improve collective defenses against the growing threat of AI‑driven cyberattacks.

Sources: