Threat Intel
Every TrendGuru field note filed under Threat Intel — emerging threats, defensive patterns, and what is actually working in production.
14 articles
Polymorphic AI Malware Is Learning to Evade EDR in Real Time
Malware that rewrites itself per host used to be slow and sloppy. Generative models made it fast, targeted and quiet — and signature-based detection is falling behind.
Browser Extensions Are the New Exfiltration Channel for AI Chats
Security teams are discovering that everyday browser extensions can read — and quietly ship out — everything employees type into AI assistants. The clipboard was never the problem; the DOM is.
Deepfake Fraud Losses Tripled — Finance Teams Are Rewiring Payment Approval
Video and voice clones now pass the 'quick call to confirm' test that finance teams relied on. The control that failed was never technical.
AI Agents Are Now Phishing Each Other — and It Works Better Than on Humans
Attackers no longer need to fool your employees. They fool the assistant your employees trust, and the assistant does the rest.
AI-Generated Malware Is Boring, Fast, and That Is the Problem
The novelty is not sophisticated new capability. It is thousands of unremarkable variants produced faster than signature and reputation systems can absorb them.
AI Contact Centres Are Now the Softest Path Into Your Accounts
Voice bots answer faster than humans and verify identity worse. Fraud teams are seeing account takeovers that never touch a login page.
Agentic Commerce Fraud: When the Buyer Is a Bot With a Real Card
AI agents that shop, book and pay on a user's behalf break every fraud signal built on human behaviour. Merchants are now approving or declining transactions with no way to tell delegation from compromise.
Your Email Assistant Reads Attacker Mail Too
An inbox assistant with send and calendar permissions turns every inbound message into a potential instruction. The mitigation is not a better model, it is a smaller blast radius.
Jailbreak-as-a-Service: Guardrail Bypasses Became a Subscription
Prompt bypasses used to circulate on forums for free. In 2026 they ship as maintained products with uptime promises, model coverage matrices and refunds when a patch lands.
Malicious AI Browser Extensions Are the New Endpoint Agent
"Summarise this page" extensions ask for read access to every tab. A wave of 2026 takeovers shows what happens when that permission changes hands.
Voice Cloning Has Made the Helpdesk Your Weakest Authentication Factor
Three seconds of audio is enough. Account-recovery calls are now the cheapest route into a corporate identity, and knowledge-based verification is no longer a control — it is theatre.
Your RAG Pipeline Is an Untrusted Input Channel
Retrieval-augmented generation quietly turned every indexed PDF, ticket and wiki page into executable instructions. Here is what the 2026 attack pattern looks like — and the five controls that actually hold.
Model Marketplace Poisoning: The Supply-Chain Attack Hiding in Your Weights
Hugging Face, Ollama, internal model registries and cloud AI catalogs have become the npm of AI. In 2026 the first wave of production incidents traced to poisoned open-weight artifacts is already here — quietly.
Enterprise Copilot Exfiltration: The Quiet Data-Loss Channel of 2026
Every major SaaS suite now ships a built-in copilot with read access to mail, files, chats and tickets. In 2026 the fastest-growing data-loss channel isn't ransomware — it's an authenticated employee asking their copilot the wrong question at the wrong time.