Threat Detection

Threat detection refers to the tools and processes organizations use to spot malicious activity, such as intrusions, fraud, or misuse, as it happens. In the context of AI governance, it covers both using AI to find security threats and monitoring AI systems themselves for attacks like prompt injection, data leakage, or unauthorized model access. Compliance and risk teams care about it because regulators and contracts increasingly expect firms to demonstrate that they can detect and respond to incidents in a timely way.

1 item

ResearchGlobal2026-10-16

APT29 Used Claude Agents to Auto-Rebuild Malware 5 Times in 25 Days

Research from ReversingLabs shows Russian state-linked threat group APT29 used Claude-powered agentic workflows to automatically rebuild malware each time security tools detected it. This produced five distinct variants over 25 days. Despite the faster evasion cycle, behavior-based detection caught every iteration because the malware's core actions remained unchanged. The finding has direct implications for how enterprises assess detection controls and vendor AI misuse risk.

APT29 Anthropic Claude agentic AI adversarial AI malware evasion threat detection cybersecurity