Adversaries weaponize cloud AI—Talos reveals malware and scaling attacks
Talos analyzed thousands of prompt logs left on threat‑actor machines running Claude Code, CodeX, Cursor and Gemini, uncovering how AI is used as a code‑generator, campaign accelerator, and vulnerability‑research tool. The study shows even low‑skill actors can spawn malicious payloads, while seasoned groups produce sophisticated exploits that evade model guardrails—meaning attacks will become faster, cheaper, and harder to detect.