Threats from AI skills are escalating as the cybersecurity group expands research to counter a fast-growing software supply chain and attack surface.