📊 Full opportunity report: The Frameworks Can’t See the Thing That Matters: A Year of AI-Enabled Cyber Threats on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
A year-long analysis shows AI is increasingly used by cyber attackers to enhance their capabilities, blurring distinctions between skilled and unskilled actors. Traditional threat assessment methods are now less effective, raising new security challenges.
New analysis from Anthropic indicates that AI is fundamentally changing the landscape of cyber threats, making attackers more capable and difficult to distinguish using traditional threat assessment methods. The report, based on 832 banned malicious accounts, shows that AI is enabling less skilled actors to perform complex, previously skill-dependent techniques, challenging long-standing security frameworks.
The report examined accounts banned for malicious activities between March 2025 and March 2026, mapping their techniques onto the MITRE ATT&CK framework. It found that 67.3% of these accounts used AI to prepare for attacks, primarily for tasks like malware creation. More concerning is the increasing use of AI for post-infiltration activities such as lateral movement, which jumped from 33% in the first half of the year to 56% in the second.
Furthermore, the use of AI shifted away from initial access methods like phishing to deeper network activities, indicating attackers are leveraging AI to operate once inside a target network. The report highlights that AI now allows less skilled actors to perform complex tasks like account discovery and lateral movement, which previously required expert knowledge. This trend signifies a democratization of attack capabilities, making it harder for defenders to differentiate between high- and low-risk actors based on traditional signals such as technique count or tool usage.
The frameworks can’t see the thing that matters
For decades, danger meant which techniques an attacker commands. A year of real AI-enabled attacks — 832 banned accounts mapped onto MITRE ATT&CK — shows that signal breaking, just as a new, harder-to-see one takes over.
A year of real misuse, mapped to the standard taxonomy
A window, not a census — these are the cases with enough detail to assess techniques thoroughly. Inside it, the risk level climbed fast.
WHAT WAS STUDIED
THE RISK CLIMB · MEDIUM-OR-HIGHER ACTORS
cybersecurity threat detection tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
“More techniques” stopped meaning “more dangerous”
The old heuristic: count the techniques, judge the tooling. AI dissolved it — because the model supplies the techniques either way. Watch the old signal fail, then watch what it misses.
Risk score vs. technique count
Two ways to read the same attacker. One is going blind. Press play.
AI cybersecurity defense software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Deeper into the attack — and into less-skilled hands
Across the year, AI use drifted from getting in toward acting once already inside — the operationally demanding stages that used to require an expert.
The attack lifecycle · where AI is now applied
The center of gravity moved right — toward post-compromise work.
Applied Network Security Monitoring: Collection, Detection, and Analysis
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From “what they know” to “what they’ve built”
The report sorts the signals into three tiers — one dead, one fading, one durable.
Technique count & tooling
16 vs. 20 between novice and expert; platform doesn’t correlate. The model supplies the techniques either way.
Where in the lifecycle AI is applied
Concentrating on operationally demanding, post-compromise stages is a better signal — but it’s eroding as the whole population heads there.
The scaffolding around the model
Architectures that let the model chain stages and run with minimal human input. Not what they know — whether they’ve built a system that lets AI run the attack.
malware analysis tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Fixing the map before the territory moves again
A taxonomy that can’t name the most dangerous behavior on the field will quietly mislead the people relying on it. The response runs in two directions.
Fed back into the models
The findings informed safeguards on the most capable models, built to detect & block some of what was observed:
- Blocking malware development
- Blocking mass data exfiltration
- Putting tools in defenders’ hands first (Project Glasswing)
Taking it to the source
Following the Verizon work, Anthropic says it’s in discussions with MITRE about how ATT&CK might evolve:
- A vocabulary for agentic orchestration
- Naming the scaffolding that makes a model an operator
- An interactive technique visualization on the Red blog
Reading it in proportion
- The 832 cases are a detailed subset, not the full population — the precise percentages are directional, not definitive.
- “More autonomous” is not “fully autonomous” — even the standout case needed human input at key moments, which is itself a place for defenders to intervene.
- This is one vendor’s window — the company with visibility into misuse of its own model, publishing what it found. The right thing to do with the data, and worth remembering as you read it.
Changing Threat Evaluation in the AI Era
This development matters because it undermines the traditional metrics used to assess threat levels, such as the number of techniques employed or the sophistication of tools. As AI enables less skilled actors to perform complex, high-risk activities, security teams must reconsider how they identify and prioritize threats. The democratization of advanced attack techniques increases the overall threat landscape, potentially leading to more frequent and severe breaches.
Security frameworks that rely on observable technical complexity are now less reliable, requiring new approaches that account for AI-facilitated activities. This shift could have broad implications for cybersecurity strategies, resource allocation, and threat intelligence practices.
Evolution of Cyber Attacks with AI Integration
For decades, threat assessment depended on measuring the number of techniques and tools used by attackers, with more techniques indicating higher danger. However, recent developments show that AI can automate and perform complex tasks, reducing the skill gap among attackers. The report from Anthropic is part of a broader trend where AI-driven automation is transforming cyberattack methods, a shift also reflected in Verizon’s 2026 Data Breach Investigations Report.
Historically, post-infiltration activities like lateral movement and privilege escalation required significant expertise. Now, AI models are enabling even less skilled actors to execute these steps, which previously distinguished advanced threat groups from amateurs. This evolution raises concerns about the effectiveness of existing threat models, which are based on observable technical sophistication.
“Our analysis shows a clear trend: AI is democratizing cyberattack capabilities, enabling a broader range of actors to perform high-risk activities once reserved for elite hackers.”
— Anthropic report author
What Aspects of AI-Driven Threats Are Still Unclear?
It remains uncertain how widespread the use of AI-enabled techniques is beyond the subset analyzed, and whether current detection systems can adapt quickly enough to these changes. The full extent of how AI is lowering the skill barrier for cyberattackers is still being studied, and the long-term impact on threat landscapes is not yet fully understood.
Next Steps for Cybersecurity in an AI-Driven Threat Environment
Security professionals will need to develop new detection and response strategies that account for AI-facilitated activities. Ongoing research aims to identify emerging patterns and improve threat intelligence frameworks. Additionally, organizations may need to invest in AI-aware cybersecurity tools and training to stay ahead of increasingly sophisticated attackers.
Key Questions
How does AI make attackers more dangerous?
AI automates complex tasks like lateral movement and account discovery, allowing less skilled actors to execute high-risk activities that previously required expertise.
Why are traditional threat assessment methods no longer reliable?
Because AI enables attackers to perform complex techniques regardless of their skill level, making technique count and tool usage poor indicators of threat level.
What can organizations do to defend against AI-enabled attacks?
Organizations should adopt AI-aware detection systems, enhance threat intelligence, and update security protocols to recognize AI-facilitated behaviors.
Is this trend likely to continue or accelerate?
Given the rapid development of AI capabilities, experts expect this trend to accelerate, further blurring the lines between different attacker skill levels.
Source: ThorstenMeyerAI.com
