Google Threat Intelligence Group reported that threat actors are shifting toward agentic workflows capable of managing multi-stage intrusions automatically