📊 Full opportunity report: The Frameworks Can’t See the Thing That Matters: A Year of AI-Enabled Cyber Threats on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
Anthropic’s analysis of 832 banned accounts shows AI is making cyber attackers more dangerous and harder to distinguish using traditional metrics. Attackers now leverage AI for complex tasks once limited to skilled actors, shifting threat assessment methods.
New research from Anthropic reveals that AI is significantly increasing the danger posed by cyberattackers, with malicious actors using AI to perform complex tasks previously limited to highly skilled hackers. This shift challenges longstanding threat assessment methods and signals a new era of cybersecurity risk.
Anthropic examined 832 accounts banned for malicious activity between March 2025 and March 2026, mapping their techniques onto the MITRE ATT&CK framework. The findings show that AI is primarily used to automate attack preparation, such as malware creation, with 67.3% of actors employing AI for this purpose. More concerning, however, is the increased use of AI for post-breach activities like lateral movement, which saw a rise from 33% to 56% over the year.
Attackers’ use of AI shifted from initial access techniques to deeper network navigation, indicating a focus on operational activities once inside a system. Notably, AI-enabled lateral movement and account discovery increased, while AI-assisted phishing decreased slightly. The report emphasizes that AI now empowers less skilled actors to perform tasks once requiring high expertise, effectively democratizing advanced attack capabilities.
The frameworks can’t see the thing that matters
For decades, danger meant which techniques an attacker commands. A year of real AI-enabled attacks — 832 banned accounts mapped onto MITRE ATT&CK — shows that signal breaking, just as a new, harder-to-see one takes over.
A year of real misuse, mapped to the standard taxonomy
A window, not a census — these are the cases with enough detail to assess techniques thoroughly. Inside it, the risk level climbed fast.
WHAT WAS STUDIED
THE RISK CLIMB · MEDIUM-OR-HIGHER ACTORS
Python Scripting for Cybersecurity: Linux Edition: Volume 2 – Log Analysis, Network Visibility, and Threat Detection with Hands-On Python Projects
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
“More techniques” stopped meaning “more dangerous”
The old heuristic: count the techniques, judge the tooling. AI dissolved it — because the model supplies the techniques either way. Watch the old signal fail, then watch what it misses.
Risk score vs. technique count
Two ways to read the same attacker. One is going blind. Press play.
OSINT 2.0: AI-Powered Open-Source Intelligence for Beginners (OSINT 2.0 — Artificial Intelligence for Open-Source Intelligence and Cyber Investigations Book 1)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Deeper into the attack — and into less-skilled hands
Across the year, AI use drifted from getting in toward acting once already inside — the operationally demanding stages that used to require an expert.
The attack lifecycle · where AI is now applied
The center of gravity moved right — toward post-compromise work.
Network Intrusion Detection
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From “what they know” to “what they’ve built”
The report sorts the signals into three tiers — one dead, one fading, one durable.
Technique count & tooling
16 vs. 20 between novice and expert; platform doesn’t correlate. The model supplies the techniques either way.
Where in the lifecycle AI is applied
Concentrating on operationally demanding, post-compromise stages is a better signal — but it’s eroding as the whole population heads there.
The scaffolding around the model
Architectures that let the model chain stages and run with minimal human input. Not what they know — whether they’ve built a system that lets AI run the attack.
cyber attack simulation kits
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Fixing the map before the territory moves again
A taxonomy that can’t name the most dangerous behavior on the field will quietly mislead the people relying on it. The response runs in two directions.
Fed back into the models
The findings informed safeguards on the most capable models, built to detect & block some of what was observed:
- Blocking malware development
- Blocking mass data exfiltration
- Putting tools in defenders’ hands first (Project Glasswing)
Taking it to the source
Following the Verizon work, Anthropic says it’s in discussions with MITRE about how ATT&CK might evolve:
- A vocabulary for agentic orchestration
- Naming the scaffolding that makes a model an operator
- An interactive technique visualization on the Red blog
Reading it in proportion
- The 832 cases are a detailed subset, not the full population — the precise percentages are directional, not definitive.
- “More autonomous” is not “fully autonomous” — even the standout case needed human input at key moments, which is itself a place for defenders to intervene.
- This is one vendor’s window — the company with visibility into misuse of its own model, publishing what it found. The right thing to do with the data, and worth remembering as you read it.
Implications of AI-Driven Attack Sophistication
This development fundamentally alters threat assessment in cybersecurity. Traditional indicators—such as the number of techniques used or the tools employed—no longer reliably distinguish high-risk actors, as AI levels the playing field. The increased use of AI for complex tasks means even less skilled attackers can cause substantial damage, raising the stakes for defenders and complicating threat detection.
Security teams must reconsider how they evaluate threats, focusing more on behavioral signals and the context of AI use rather than just technique count or tool signatures. The report warns that this shift could lead to a surge in more dangerous, harder-to-detect attacks, emphasizing the need for updated detection strategies and increased AI-aware defenses.
How AI Is Reshaping Cyberattack Patterns
Historically, threat assessment relied on counting techniques and analyzing tools to gauge attacker sophistication. However, recent developments show AI’s role in automating complex attack steps, making even less skilled actors capable of executing advanced maneuvers. The analysis by Anthropic covers a period marked by increasing AI integration into malicious workflows, reflecting broader trends in cybercrime and AI capabilities.
Previous reports, including Verizon’s 2026 Data Breach Investigations, highlighted rising cyber threats, but the new data underscores how AI is enabling a qualitative leap in attack complexity. This evolution is part of a broader trend where AI tools are becoming integral to malicious activity, blurring lines between amateurs and experts in threat profiling.
“Attackers are increasingly leveraging AI for operational tasks once restricted to highly skilled hackers, democratizing advanced attack capabilities.”
— Anthropic report authors
Unclear Impact of AI on Future Threat Landscape
While the report provides strong evidence of AI’s role in increasing attack sophistication, it is still unclear how widespread these practices will become or how quickly defenders can adapt their detection methods. The long-term impact of AI-enabled attack democratization remains uncertain, as does the development of counter-AI defenses.
Adapting Defense Strategies to AI-Driven Threats
Cybersecurity teams will need to develop new detection frameworks that account for AI’s role in attack complexity. Expect increased investment in AI-aware security tools and behavioral analysis. Further research will likely focus on identifying resilient signals of threat activity that are less susceptible to AI manipulation.
Key Questions
How does AI make attackers more dangerous?
AI automates complex attack tasks like lateral movement and account discovery, enabling less skilled actors to perform sophisticated operations that previously required expert knowledge.
Why are traditional threat indicators no longer reliable?
Because AI allows attackers to perform multiple techniques with fewer tools and less skill, the number of techniques used no longer correlates with threat level, making it harder to distinguish dangerous actors.
What should cybersecurity teams do in response?
Teams should focus on behavioral signals, monitor AI activity patterns, and develop AI-aware detection tools to better identify and respond to evolving threats.
Is this trend likely to continue?
Yes, as AI technology advances and becomes more accessible, its integration into cyberattacks is expected to increase, further complicating threat detection and response efforts.
Source: ThorstenMeyerAI.com
