📊 Full opportunity report: The Frameworks Can’t See the Thing That Matters: A Year of AI-Enabled Cyber Threats on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
A year-long analysis reveals AI is increasing the sophistication of cyberattacks and blurring the lines between skilled and amateur attackers. Traditional threat assessment models are no longer effective, raising new security challenges.
New research from Anthropic indicates that AI is fundamentally changing the landscape of cyber threats, making attackers more dangerous and rendering traditional threat assessment models obsolete. The study, based on an analysis of 832 malicious accounts, shows AI’s role in escalating attack complexity and blurring the lines between skilled and amateur actors, posing a fresh challenge to cybersecurity defenses.
Anthropic examined 832 accounts banned for malicious activity between March 2025 and March 2026, mapping their techniques onto the MITRE ATT&CK framework. The findings reveal that 67.3% of these accounts used AI to prepare for attacks, primarily for malware creation. Notably, AI’s role in complex activities like lateral movement increased significantly over the year, with a 1.7-fold rise in medium- to high-risk actors. AI use shifted from initial access techniques toward post-breach activities, such as account discovery and lateral movement, indicating a deeper penetration strategy.
This trend suggests that AI enables less skilled actors to perform technically demanding tasks, previously reserved for experts. The report highlights that the traditional markers of threat level—technique diversity and tool sophistication—are no longer reliable indicators of danger, as even low-skill actors now demonstrate capabilities once limited to highly skilled hackers. Instead, the key differentiator appears to be where in the attack lifecycle AI is applied and how attackers scaffold their models around operational techniques.
The frameworks can’t see the thing that matters
For decades, danger meant which techniques an attacker commands. A year of real AI-enabled attacks — 832 banned accounts mapped onto MITRE ATT&CK — shows that signal breaking, just as a new, harder-to-see one takes over.
A year of real misuse, mapped to the standard taxonomy
A window, not a census — these are the cases with enough detail to assess techniques thoroughly. Inside it, the risk level climbed fast.
WHAT WAS STUDIED
THE RISK CLIMB · MEDIUM-OR-HIGHER ACTORS
INTELLIGENT CYBERSECURITY SOFTWARE SYSTEMS: Threat detection automated response and adaptive defense architectures
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
“More techniques” stopped meaning “more dangerous”
The old heuristic: count the techniques, judge the tooling. AI dissolved it — because the model supplies the techniques either way. Watch the old signal fail, then watch what it misses.
Risk score vs. technique count
Two ways to read the same attacker. One is going blind. Press play.
OSINT 2.0: AI-Powered Open-Source Intelligence for Beginners (OSINT 2.0 — Artificial Intelligence for Open-Source Intelligence and Cyber Investigations Book 1)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Deeper into the attack — and into less-skilled hands
Across the year, AI use drifted from getting in toward acting once already inside — the operationally demanding stages that used to require an expert.
The attack lifecycle · where AI is now applied
The center of gravity moved right — toward post-compromise work.
The Practice of Network Security Monitoring: Understanding Incident Detection and Response
Used Book in Good Condition
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From “what they know” to “what they’ve built”
The report sorts the signals into three tiers — one dead, one fading, one durable.
Technique count & tooling
16 vs. 20 between novice and expert; platform doesn’t correlate. The model supplies the techniques either way.
Where in the lifecycle AI is applied
Concentrating on operationally demanding, post-compromise stages is a better signal — but it’s eroding as the whole population heads there.
The scaffolding around the model
Architectures that let the model chain stages and run with minimal human input. Not what they know — whether they’ve built a system that lets AI run the attack.
Operationalizing Threat Intelligence: A guide to developing and operationalizing cyber threat intelligence programs
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Fixing the map before the territory moves again
A taxonomy that can’t name the most dangerous behavior on the field will quietly mislead the people relying on it. The response runs in two directions.
Fed back into the models
The findings informed safeguards on the most capable models, built to detect & block some of what was observed:
- Blocking malware development
- Blocking mass data exfiltration
- Putting tools in defenders’ hands first (Project Glasswing)
Taking it to the source
Following the Verizon work, Anthropic says it’s in discussions with MITRE about how ATT&CK might evolve:
- A vocabulary for agentic orchestration
- Naming the scaffolding that makes a model an operator
- An interactive technique visualization on the Red blog
Reading it in proportion
- The 832 cases are a detailed subset, not the full population — the precise percentages are directional, not definitive.
- “More autonomous” is not “fully autonomous” — even the standout case needed human input at key moments, which is itself a place for defenders to intervene.
- This is one vendor’s window — the company with visibility into misuse of its own model, publishing what it found. The right thing to do with the data, and worth remembering as you read it.
Implications of AI-Driven Threat Democratization
This shift signifies a fundamental change in cybersecurity risk assessment. As AI lowers the technical barrier for executing complex attack techniques, threat actors of all skill levels can carry out more sophisticated operations. This democratization of offensive capabilities challenges existing frameworks that rely on the number of techniques or tool sophistication to gauge threat levels. Consequently, security teams must rethink their detection and response strategies to account for AI-enabled attack behaviors that are less predictable and more widespread.
Evolution of Cyber Threats and AI Integration
Historically, threat assessment has depended on the assumption that more techniques and advanced tools correlate with higher danger. However, recent developments show AI’s role in automating and simplifying complex attack steps, making it easier for less experienced actors to pose significant risks. The rise of AI in cybercrime coincides with broader adoption of machine learning models by attackers, marking a new phase in threat evolution that began gaining momentum over the past year.
“The link between an attacker’s skill level and the techniques they employ is dissolving as AI tools perform much of the technical work for them.”
— Anthropic report author
Unclear Aspects of AI’s Impact on Threat Detection
It remains unclear how quickly security frameworks can adapt to these changes and whether new detection methods will be effective against AI-augmented threats. The extent to which AI is being weaponized in broader cybercrime networks outside the studied subset is also not yet fully known. Additionally, the long-term implications of AI-driven attack scaffolding are still emerging, and the full scope of threat evolution remains uncertain.
Next Steps for Cybersecurity Defense Strategies
Security professionals are expected to focus on developing new detection models that account for AI-enabled attack behaviors. Further research will likely examine the proliferation of AI tools among threat actors and their impact on threat landscapes. Organizations should prepare for increasingly sophisticated and less predictable attacks, emphasizing adaptive, AI-aware defense mechanisms and continuous threat intelligence updates.
Key Questions
How is AI changing the way cyber attackers operate?
AI automates complex attack tasks like malware creation, lateral movement, and account discovery, enabling less skilled actors to perform operations once reserved for experts. This broadens the threat landscape and complicates threat assessment.
Why are traditional threat indicators no longer reliable?
Because AI allows attackers to perform a wide range of techniques regardless of their skill level, the number of techniques or tools used no longer correlates with threat severity. Attackers can now mimic highly skilled actors with minimal technical expertise.
What does this mean for cybersecurity defenses?
Defenders need to develop new detection approaches that focus on attack behaviors and operational signals rather than solely on technical complexity or tool signatures. AI-aware security strategies will be essential.
Are all threat actors using AI in their attacks?
The report indicates a significant increase in AI use among malicious accounts, but the extent of AI adoption across the entire threat landscape remains to be seen. More widespread adoption is likely as AI tools become more accessible.
What can organizations do now to prepare?
Organizations should invest in AI-aware threat detection, update incident response plans, and monitor evolving attack techniques. Collaboration with cybersecurity research and intelligence sharing will also be crucial.
Source: ThorstenMeyerAI.com
