📊 Full opportunity report: The Frameworks Can’t See the Thing That Matters: A Year of AI-Enabled Cyber Threats on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
A recent report reveals that AI is enabling cyber attackers to become more sophisticated and indistinguishable from less skilled actors, disrupting traditional threat assessment methods. The use of AI in post-compromise activities has increased sharply, raising new security challenges.
A new analysis from Anthropic reveals that AI is enabling cyber attackers to perform more complex and dangerous activities, fundamentally changing threat assessment in 2026. This development matters because it undermines traditional methods used by security teams to distinguish between skilled and amateur hackers, complicating defense strategies.
Anthropic examined 832 accounts banned for malicious activity over a year, mapping their techniques onto the MITRE ATT&CK framework. The key finding is that AI is increasingly used to automate and perform complex attack tasks, especially after initial access, such as lateral movement and account discovery. The proportion of actors employing AI for high-risk activities rose from 33% in the first half of 2025 to 56% in the second half, indicating rapid growth.
Importantly, the report shows that AI enables less skilled actors to carry out sophisticated operations previously requiring expertise. The correlation between an attacker’s skill level—measured by technique count or tool complexity—and threat level is weakening. Attackers with fewer techniques now pose similar risks as highly skilled actors because AI supplies many of the technical maneuvers.
Additionally, the data indicates that the tools or interfaces attackers use do not reliably indicate threat level. Instead, the focus shifts to where in the attack lifecycle AI is applied, with high-risk actors concentrating AI efforts on operationally demanding tasks, although this signal is also becoming less distinctive as more actors adopt AI for these purposes.
The frameworks can’t see the thing that matters
For decades, danger meant which techniques an attacker commands. A year of real AI-enabled attacks — 832 banned accounts mapped onto MITRE ATT&CK — shows that signal breaking, just as a new, harder-to-see one takes over.
A year of real misuse, mapped to the standard taxonomy
A window, not a census — these are the cases with enough detail to assess techniques thoroughly. Inside it, the risk level climbed fast.
WHAT WAS STUDIED
THE RISK CLIMB · MEDIUM-OR-HIGHER ACTORS
Ghidra for Digital Forensics and Malware Investigation: A Practical Guide to Reverse Engineering, Code Analysis, and Threat Detection (cybersecurity digital tools)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
“More techniques” stopped meaning “more dangerous”
The old heuristic: count the techniques, judge the tooling. AI dissolved it — because the model supplies the techniques either way. Watch the old signal fail, then watch what it misses.
Risk score vs. technique count
Two ways to read the same attacker. One is going blind. Press play.
Hands-On Artificial Intelligence for Cybersecurity: Implement smart AI systems for preventing cyber attacks and detecting threats and network anomalies
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Deeper into the attack — and into less-skilled hands
Across the year, AI use drifted from getting in toward acting once already inside — the operationally demanding stages that used to require an expert.
The attack lifecycle · where AI is now applied
The center of gravity moved right — toward post-compromise work.
The Practice of Network Security Monitoring: Understanding Incident Detection and Response
Used Book in Good Condition
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From “what they know” to “what they’ve built”
The report sorts the signals into three tiers — one dead, one fading, one durable.
Technique count & tooling
16 vs. 20 between novice and expert; platform doesn’t correlate. The model supplies the techniques either way.
Where in the lifecycle AI is applied
Concentrating on operationally demanding, post-compromise stages is a better signal — but it’s eroding as the whole population heads there.
The scaffolding around the model
Architectures that let the model chain stages and run with minimal human input. Not what they know — whether they’ve built a system that lets AI run the attack.
The 72-Hour Family Survival Guide (US-Iran War Edition): The Clock is Ticking. Act Now Before Phones Fail, Stores Empty, and Help Never Comes
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Fixing the map before the territory moves again
A taxonomy that can’t name the most dangerous behavior on the field will quietly mislead the people relying on it. The response runs in two directions.
Fed back into the models
The findings informed safeguards on the most capable models, built to detect & block some of what was observed:
- Blocking malware development
- Blocking mass data exfiltration
- Putting tools in defenders’ hands first (Project Glasswing)
Taking it to the source
Following the Verizon work, Anthropic says it’s in discussions with MITRE about how ATT&CK might evolve:
- A vocabulary for agentic orchestration
- Naming the scaffolding that makes a model an operator
- An interactive technique visualization on the Red blog
Reading it in proportion
- The 832 cases are a detailed subset, not the full population — the precise percentages are directional, not definitive.
- “More autonomous” is not “fully autonomous” — even the standout case needed human input at key moments, which is itself a place for defenders to intervene.
- This is one vendor’s window — the company with visibility into misuse of its own model, publishing what it found. The right thing to do with the data, and worth remembering as you read it.
Impact of AI on Threat Assessment Models in 2026
This shift signifies that traditional threat assessment heuristics—based on the number of techniques or sophistication of tools—are losing effectiveness. As AI democratizes complex attack capabilities, security teams must reconsider how they evaluate risk, as the old markers no longer reliably indicate threat level. This development increases the difficulty of early detection and response, potentially allowing more dangerous actors to operate undetected.
Evolution of Cyberattack Techniques with AI Integration
Historically, threat assessment relied on counting techniques and analyzing tool complexity, assuming more techniques indicated higher threat levels. Recent years have seen the rise of AI in cybercrime, initially used for mundane tasks like malware creation and phishing. However, the latest data shows AI is now supporting sophisticated post-breach activities, such as lateral movement and account discovery, making attacks more dangerous and accessible to less skilled actors.
This trend reflects a broader shift in cyber threat landscape, where AI’s capabilities are expanding rapidly, and attackers are increasingly leveraging these tools to bypass traditional detection methods. The report from Anthropic provides a real-world snapshot of this evolution, based on observed malicious accounts over a year.
“The link between attacker skill and the number of techniques used no longer holds, as AI supplies many of the technical maneuvers.”
— Anthropic report authors
Unclear Extent and Future Trajectory of AI-Driven Attacks
It remains uncertain how widespread AI-enabled attacks will become in the broader cyber threat landscape beyond the subset analyzed. The full scope of how attackers will integrate AI into future campaigns, and whether defense mechanisms can adapt quickly enough, is still developing. Additionally, the long-term implications of AI’s role in attack sophistication are not yet fully understood.
Next Steps for Cyber Defense in the Age of AI
Security teams will need to develop new detection strategies that do not rely solely on traditional heuristics like technique count or tool signatures. Monitoring for operational behaviors, AI scaffolding, and shifts in attack lifecycle focus may become more important. Ongoing research and real-time intelligence sharing will be critical to adapt defenses to this evolving threat landscape. Further studies are expected to clarify how widespread and persistent AI-enabled attacks will become.
Key Questions
How does AI make attackers more dangerous?
AI automates complex attack activities like lateral movement and account discovery, allowing less skilled actors to perform sophisticated operations that previously required expertise.
Why are traditional threat assessment methods no longer effective?
Because AI supplies many of the technical techniques, reducing the correlation between attacker skill and the number of techniques used, making it harder to distinguish between amateurs and professionals based on technique count or tool complexity.
What should security teams do in response?
Teams need to shift focus toward behavioral and operational signals, monitor AI scaffolding, and update detection frameworks to account for AI-driven attack patterns.
Is this trend expected to continue?
While current data indicates rapid growth, the full trajectory depends on technological developments and attacker adoption, which remain uncertain.
Source: ThorstenMeyerAI.com
