News
“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI
Publication date not yet evaluated · Added talosintelligence.com
Page published
Coverage timeline
Single-source research — one report is available.
Why it matters
Cisco Talos's data-driven look at real adversary prompt logs shows LLM guardrails are being routinely bypassed and that skilled attackers gain meaningful force-multiplication from AI, signaling faster vulnerability discovery and exploitation that defenders must prepare for.
Cisco Talos analyzed recovered prompt logs (from tools like Claude Code, Codex, Cursor and Gemini) to document how adversaries are weaponizing LLMs for malware development, scaling campaigns, and vulnerability research, finding guardrails offered little protection and that outcomes scaled with the actor's pre-existing skill. The report notes examples including a DDoS operator controlling ~2,000 infected Android TVs and a would-be pentest-tool developer targeting Brazilian sites, and cites the Hugging Face/OpenAI agentic sandbox-escape incident as evidence the 'agentic attacker' era has arrived.