📊 Full opportunity report: The Frameworks Can’t See the Thing That Matters: A Year of AI-Enabled Cyber Threats on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
Anthropic’s recent analysis shows AI is increasingly used in cyberattacks, enabling less skilled actors to execute complex techniques. This challenges existing threat assessment models, raising concerns about rising cybersecurity risks in 2026.
New research from Anthropic indicates that AI is significantly increasing the danger of cyberattacks in 2026, with attackers leveraging AI to perform complex activities once considered exclusive to highly skilled hackers. This development challenges longstanding threat assessment frameworks, which rely on the number of techniques used and the tools employed to gauge attacker sophistication.
Anthropic analyzed 832 accounts banned for malicious activity between March 2025 and March 2026, mapping their techniques onto the MITRE ATT&CK framework. The findings reveal that 67.3% of these actors used AI primarily to prepare for attacks, such as writing malware, while a smaller but growing segment employed AI for advanced tasks like lateral movement within networks. Over the year, the proportion of actors engaging in medium or higher risk activities increased from 33% to 56%, indicating a rapid escalation in threat levels.
Furthermore, the use of AI shifted away from initial access techniques like phishing, toward post-compromise activities such as account discovery and lateral movement, which are more complex and typically require expertise. Importantly, the report notes that AI enables less skilled actors to perform these advanced techniques, effectively democratizing cyberattack capabilities. This trend diminishes the reliability of traditional threat indicators—such as the number of techniques or tools used—to distinguish between high- and low-risk actors.
Instead, the report suggests that the key differentiator now lies in how attackers deploy AI, particularly the focus on operationally demanding techniques and the scaffolding they build around AI models. These insights indicate a fundamental shift in threat landscape assessment, with AI lowering the skill barrier for sophisticated attacks.
The frameworks can’t see the thing that matters
For decades, danger meant which techniques an attacker commands. A year of real AI-enabled attacks — 832 banned accounts mapped onto MITRE ATT&CK — shows that signal breaking, just as a new, harder-to-see one takes over.
A year of real misuse, mapped to the standard taxonomy
A window, not a census — these are the cases with enough detail to assess techniques thoroughly. Inside it, the risk level climbed fast.
WHAT WAS STUDIED
THE RISK CLIMB · MEDIUM-OR-HIGHER ACTORS
Artificial Intelligence for Cybersecurity: How AI Detects Cyber Threats, Prevents Hacking, and Protects Your Data, Identity, and Smart Devices (AI Cybersecurity Mastery Series)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
“More techniques” stopped meaning “more dangerous”
The old heuristic: count the techniques, judge the tooling. AI dissolved it — because the model supplies the techniques either way. Watch the old signal fail, then watch what it misses.
Risk score vs. technique count
Two ways to read the same attacker. One is going blind. Press play.
Python Scripting for Cybersecurity: Linux Edition: Volume 2 – Log Analysis, Network Visibility, and Threat Detection with Hands-On Python Projects
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Deeper into the attack — and into less-skilled hands
Across the year, AI use drifted from getting in toward acting once already inside — the operationally demanding stages that used to require an expert.
The attack lifecycle · where AI is now applied
The center of gravity moved right — toward post-compromise work.
Network Intrusion Detection
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From “what they know” to “what they’ve built”
The report sorts the signals into three tiers — one dead, one fading, one durable.
Technique count & tooling
16 vs. 20 between novice and expert; platform doesn’t correlate. The model supplies the techniques either way.
Where in the lifecycle AI is applied
Concentrating on operationally demanding, post-compromise stages is a better signal — but it’s eroding as the whole population heads there.
The scaffolding around the model
Architectures that let the model chain stages and run with minimal human input. Not what they know — whether they’ve built a system that lets AI run the attack.
cyber attack simulation kits
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Fixing the map before the territory moves again
A taxonomy that can’t name the most dangerous behavior on the field will quietly mislead the people relying on it. The response runs in two directions.
Fed back into the models
The findings informed safeguards on the most capable models, built to detect & block some of what was observed:
- Blocking malware development
- Blocking mass data exfiltration
- Putting tools in defenders’ hands first (Project Glasswing)
Taking it to the source
Following the Verizon work, Anthropic says it’s in discussions with MITRE about how ATT&CK might evolve:
- A vocabulary for agentic orchestration
- Naming the scaffolding that makes a model an operator
- An interactive technique visualization on the Red blog
Reading it in proportion
- The 832 cases are a detailed subset, not the full population — the precise percentages are directional, not definitive.
- “More autonomous” is not “fully autonomous” — even the standout case needed human input at key moments, which is itself a place for defenders to intervene.
- This is one vendor’s window — the company with visibility into misuse of its own model, publishing what it found. The right thing to do with the data, and worth remembering as you read it.
Implications of AI’s Role in Cyberattack Sophistication
This development fundamentally alters how cybersecurity professionals assess threat levels. The traditional heuristic—more techniques and advanced tools indicate higher danger—no longer applies reliably, as AI enables less skilled actors to execute complex, high-impact attacks. This democratization of attack capabilities increases the overall threat landscape, making defenses more challenging and raising the risk of widespread cyber incidents.
For organizations, this means that relying solely on technical indicators like technique count or tool type is insufficient. The focus must shift toward understanding how attackers deploy AI and the specific operational techniques they prioritize, which are now more indicative of threat level.
Evolution of Cyberattack Techniques with AI Integration
For decades, threat assessment relied on counting techniques and evaluating tools to gauge attacker sophistication. The MITRE ATT&CK framework provided a structured way to categorize and compare malicious activities. However, recent developments show that AI’s integration into cyberattack workflows is disrupting this model. The use of AI for malware creation, lateral movement, and account discovery has increased markedly, with attackers progressively shifting their focus from initial access to post-compromise operations.
Prior to 2025, high technical skill was a prerequisite for executing complex attacks. Now, AI models automate many of these activities, reducing the skill barrier. The trend was already observable in early 2025 but accelerated throughout the year, culminating in a significant rise in higher-risk activities among a broader attacker base. This evolution underscores the need for updated threat assessment models that account for AI-enabled capabilities.
“The link between an attacker’s skill level and the number of techniques they use is weakening, as AI supplies many of these techniques automatically.”
— Anthropic report author
Unclear Aspects of AI’s Impact on Threat Detection
It is still unclear how widespread AI-enabled attacks will become beyond the subset analyzed, and whether current detection methods can adapt quickly enough. The report notes that attackers are building sophisticated scaffolds around their AI models, but the effectiveness of existing defenses against these evolving tactics remains uncertain. Additionally, the long-term trajectory of attacker sophistication and AI’s role in future campaigns is still developing and not fully understood.
Next Steps for Cybersecurity Defense Strategies
Organizations will need to update their threat detection and response frameworks to account for AI-enabled techniques. This includes investing in AI-aware security tools, training analysts to recognize new operational patterns, and developing models that focus on how attackers deploy AI rather than just the techniques they use. Ongoing research and intelligence sharing will be critical to stay ahead of rapidly evolving threats.
Key Questions
How does AI make attackers more dangerous?
AI enables attackers to automate complex tasks like lateral movement and account discovery, which previously required high technical skill, thereby lowering the barrier to executing sophisticated attacks.
Why are traditional threat indicators no longer reliable?
Because AI can perform many techniques automatically, the number of techniques or tools used no longer correlates with attacker skill or threat level, making these indicators less meaningful.
What should organizations do to defend against AI-enabled attacks?
Organizations should adopt AI-aware security tools, focus on operational patterns, and understand how attackers deploy AI techniques, rather than relying solely on traditional indicators.
Is this trend likely to continue or accelerate?
Based on current data, the use of AI in cyberattacks is increasing, and its capabilities are expected to expand, making this a persistent and evolving threat landscape.
Source: ThorstenMeyerAI.com
