📊 Full opportunity report: The Frameworks Can’t See the Thing That Matters: A Year of AI-Enabled Cyber Threats on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
A year-long analysis shows AI is enabling cyber attackers to become more sophisticated and harder to identify, undermining traditional threat assessment models. The use of AI for post-breach activities has increased significantly, raising new security challenges.
New research from Anthropic reveals that AI is fundamentally changing how cyber attackers operate and how security teams assess threats, rendering traditional methods ineffective.
Anthropic examined 832 accounts banned for malicious activity between March 2025 and March 2026, mapping their techniques onto the MITRE ATT&CK framework. The analysis shows that attackers increasingly leverage AI to automate and enhance their activities, especially after breaching a network.
The most common AI use was in preparing malware, with 67.3% of accounts employing AI for this purpose. Notably, 6.5% used AI for lateral movement within networks, and there was a sharp increase in the proportion of high-risk actors from 33% in the first half of the year to 56% in the second. AI’s role shifted from initial access techniques to post-breach activities, making even less skilled actors capable of executing complex operations.
This trend challenges the traditional model that assesses threat severity based on the number of techniques or tools used, as the data shows even less skilled actors now perform highly technical tasks with AI assistance. The report emphasizes that the link between skill and threat level is weakening, complicating threat detection and response.
The frameworks can’t see the thing that matters
For decades, danger meant which techniques an attacker commands. A year of real AI-enabled attacks — 832 banned accounts mapped onto MITRE ATT&CK — shows that signal breaking, just as a new, harder-to-see one takes over.
A year of real misuse, mapped to the standard taxonomy
A window, not a census — these are the cases with enough detail to assess techniques thoroughly. Inside it, the risk level climbed fast.
WHAT WAS STUDIED
THE RISK CLIMB · MEDIUM-OR-HIGHER ACTORS
Python Scripting for Cybersecurity: Linux Edition: Volume 2 – Log Analysis, Network Visibility, and Threat Detection with Hands-On Python Projects
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
“More techniques” stopped meaning “more dangerous”
The old heuristic: count the techniques, judge the tooling. AI dissolved it — because the model supplies the techniques either way. Watch the old signal fail, then watch what it misses.
Risk score vs. technique count
Two ways to read the same attacker. One is going blind. Press play.
AI-powered malware analysis tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Deeper into the attack — and into less-skilled hands
Across the year, AI use drifted from getting in toward acting once already inside — the operationally demanding stages that used to require an expert.
The attack lifecycle · where AI is now applied
The center of gravity moved right — toward post-compromise work.
network security monitoring devices
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From “what they know” to “what they’ve built”
The report sorts the signals into three tiers — one dead, one fading, one durable.
Technique count & tooling
16 vs. 20 between novice and expert; platform doesn’t correlate. The model supplies the techniques either way.
Where in the lifecycle AI is applied
Concentrating on operationally demanding, post-compromise stages is a better signal — but it’s eroding as the whole population heads there.
The scaffolding around the model
Architectures that let the model chain stages and run with minimal human input. Not what they know — whether they’ve built a system that lets AI run the attack.
cyber threat intelligence platform
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Fixing the map before the territory moves again
A taxonomy that can’t name the most dangerous behavior on the field will quietly mislead the people relying on it. The response runs in two directions.
Fed back into the models
The findings informed safeguards on the most capable models, built to detect & block some of what was observed:
- Blocking malware development
- Blocking mass data exfiltration
- Putting tools in defenders’ hands first (Project Glasswing)
Taking it to the source
Following the Verizon work, Anthropic says it’s in discussions with MITRE about how ATT&CK might evolve:
- A vocabulary for agentic orchestration
- Naming the scaffolding that makes a model an operator
- An interactive technique visualization on the Red blog
Reading it in proportion
- The 832 cases are a detailed subset, not the full population — the precise percentages are directional, not definitive.
- “More autonomous” is not “fully autonomous” — even the standout case needed human input at key moments, which is itself a place for defenders to intervene.
- This is one vendor’s window — the company with visibility into misuse of its own model, publishing what it found. The right thing to do with the data, and worth remembering as you read it.
Implications of AI-Driven Attack Complexity
This development signifies a shift in cybersecurity threats, where AI democratizes advanced attack capabilities. Security teams can no longer rely solely on technique diversity or tool sophistication to gauge threat severity, as even low-skill actors can now perform high-impact operations. This increases the risk of widespread, harder-to-detect attacks and calls for new assessment frameworks that consider AI’s role in attack execution.
Evolution of Cyberattack Techniques and Defense Strategies
Historically, threat assessment depended on counting techniques and analyzing tools to evaluate attacker sophistication. The MITRE ATT&CK framework has been a standard reference for understanding attack methods. Recent years saw an increase in AI-assisted attacks, but the 2025-2026 period marks a significant acceleration, with AI enabling less skilled actors to perform complex, post-breach activities that were previously reserved for highly skilled adversaries.
This shift coincides with broader AI adoption in cybercrime, driven by frontier models that simplify complex tasks like malware creation, lateral movement, and account discovery. The trend challenges existing cybersecurity paradigms and emphasizes the need for new detection methods that focus on attack context and operational signals rather than technique count alone.
“Our analysis shows that the link between attacker skill and technique complexity is weakening, as AI enables even less skilled actors to perform sophisticated operations.”
— Anthropic research team
Unclear Impact of AI on Future Threat Landscape
It remains uncertain how quickly threat assessment frameworks will adapt to these changes and whether new detection methods focusing on operational signals will be effective against increasingly automated and AI-driven attacks. The long-term evolution of attacker behavior and AI’s role in future cyber threats is still developing.
Next Steps for Cybersecurity Defense and Assessment
Security organizations will need to update threat models to incorporate AI-driven attack techniques. Developing new detection strategies that focus on attack context, operational signals, and behavioral patterns will be critical. Ongoing research and real-time monitoring are expected to shape future cybersecurity practices in response to AI-enabled threats.
Key Questions
How is AI changing the skills required for cyberattackers?
AI automates complex tasks like malware development and lateral movement, reducing the need for technical expertise among attackers and enabling less skilled actors to execute sophisticated operations.
Why can’t traditional threat assessment methods keep up?
Because the number of techniques or tools used is no longer a reliable indicator of threat level, as AI allows even low-skill actors to perform high-impact activities, making threat signals less distinguishable.
What new approaches are needed to detect AI-enabled attacks?
Detection strategies should focus on attack context, operational signals, and behavioral patterns rather than technique diversity or tool usage alone, to better identify sophisticated threats in the AI era.
Will AI make cyberattacks more frequent?
While AI lowers barriers for attack execution, the overall frequency depends on attacker incentives and defenses. However, the potential for increased attack sophistication and scale is significant.
Source: ThorstenMeyerAI.com
