📊 Full opportunity report: The Frameworks Can’t See the Thing That Matters: A Year of AI-Enabled Cyber Threats on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
A year-long analysis shows AI is increasingly used by cybercriminals to enhance attack complexity and scale. Traditional threat indicators like technique count and tool type no longer reliably predict danger, raising new security challenges.
New research from Anthropic shows that AI is significantly transforming cyberattack methods, making less skilled actors capable of executing more complex and dangerous operations. This shift challenges longstanding threat assessment frameworks, which relied on measures like technique diversity and tool sophistication to gauge attacker risk.
Anthropic analyzed 832 accounts banned for malicious activity between March 2025 and March 2026, mapping their techniques onto the MITRE ATT&CK framework. The study found that 67.3% of these actors used AI primarily to prepare for attacks, such as malware creation, while a smaller subset employed AI for advanced tasks like lateral movement within networks. Over the year, the proportion of actors engaging in medium or higher risk activities increased from 33% to 56%, indicating a rapid escalation in threat levels.
Importantly, the report highlights that AI now enables less skilled actors to perform technically demanding tasks, like account discovery and lateral movement, which previously required expertise. This democratization of capabilities means that threat level no longer correlates strongly with the number of techniques used or the tools employed. Instead, the focus shifts to how and when AI is used during an attack, with high-risk actors concentrating AI use on operationally intensive techniques.
The frameworks can’t see the thing that matters
For decades, danger meant which techniques an attacker commands. A year of real AI-enabled attacks — 832 banned accounts mapped onto MITRE ATT&CK — shows that signal breaking, just as a new, harder-to-see one takes over.
A year of real misuse, mapped to the standard taxonomy
A window, not a census — these are the cases with enough detail to assess techniques thoroughly. Inside it, the risk level climbed fast.
WHAT WAS STUDIED
THE RISK CLIMB · MEDIUM-OR-HIGHER ACTORS
cybersecurity threat detection tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
“More techniques” stopped meaning “more dangerous”
The old heuristic: count the techniques, judge the tooling. AI dissolved it — because the model supplies the techniques either way. Watch the old signal fail, then watch what it misses.
Risk score vs. technique count
Two ways to read the same attacker. One is going blind. Press play.
AI cybersecurity defense software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Deeper into the attack — and into less-skilled hands
Across the year, AI use drifted from getting in toward acting once already inside — the operationally demanding stages that used to require an expert.
The attack lifecycle · where AI is now applied
The center of gravity moved right — toward post-compromise work.
network monitoring and intrusion detection systems
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From “what they know” to “what they’ve built”
The report sorts the signals into three tiers — one dead, one fading, one durable.
Technique count & tooling
16 vs. 20 between novice and expert; platform doesn’t correlate. The model supplies the techniques either way.
Where in the lifecycle AI is applied
Concentrating on operationally demanding, post-compromise stages is a better signal — but it’s eroding as the whole population heads there.
The scaffolding around the model
Architectures that let the model chain stages and run with minimal human input. Not what they know — whether they’ve built a system that lets AI run the attack.
malware analysis and prevention tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Fixing the map before the territory moves again
A taxonomy that can’t name the most dangerous behavior on the field will quietly mislead the people relying on it. The response runs in two directions.
Fed back into the models
The findings informed safeguards on the most capable models, built to detect & block some of what was observed:
- Blocking malware development
- Blocking mass data exfiltration
- Putting tools in defenders’ hands first (Project Glasswing)
Taking it to the source
Following the Verizon work, Anthropic says it’s in discussions with MITRE about how ATT&CK might evolve:
- A vocabulary for agentic orchestration
- Naming the scaffolding that makes a model an operator
- An interactive technique visualization on the Red blog
Reading it in proportion
- The 832 cases are a detailed subset, not the full population — the precise percentages are directional, not definitive.
- “More autonomous” is not “fully autonomous” — even the standout case needed human input at key moments, which is itself a place for defenders to intervene.
- This is one vendor’s window — the company with visibility into misuse of its own model, publishing what it found. The right thing to do with the data, and worth remembering as you read it.
Implications of AI-Driven Attack Evolution for Cyber Defense
This development fundamentally alters how organizations must assess cyber threats. Traditional heuristics, such as counting techniques or analyzing tool types, are now unreliable indicators of attacker danger. The increased use of AI by less skilled actors to perform complex tasks means that threat actors of all skill levels can pose serious risks, demanding a reevaluation of security strategies and threat models.
Evolution of Cyberattack Techniques and AI Integration
Historically, threat assessment relied on the diversity of techniques and the sophistication of tools to gauge attacker danger. The MITRE ATT&CK framework provided a standardized way to classify tactics. However, recent developments show that AI models are enabling even novice actors to perform advanced attack steps, blurring the lines between skilled and unskilled threat actors. This trend has been accelerating over the past year, driven by the proliferation of accessible AI tools and models.
“The traditional indicators of threat level—technique count and tooling—are losing their predictive power as AI enables broader participation in complex attack activities.”
— Anthropic report author
Unanswered Questions About AI-Driven Threat Dynamics
While the report provides strong evidence of AI’s role in increasing attack complexity, it remains unclear how widespread these practices are beyond the sampled accounts. Additionally, the long-term effectiveness of current defenses against AI-enhanced threats is still uncertain, as attackers adapt rapidly.
Monitoring and Responding to AI-Enabled Threats in 2026
Security agencies and organizations are expected to revise threat assessment frameworks to incorporate AI usage patterns. Further research will likely focus on developing detection methods that account for AI-driven attack techniques and on understanding how threat actors evolve their tactics as AI tools become more accessible.
Key Questions
How does AI change the way cyberattackers operate?
AI enables attackers to automate and execute complex tasks, such as lateral movement and account discovery, which previously required specialized skills. This lowers the skill barrier and broadens the pool of capable threat actors.
Why are traditional threat indicators no longer reliable?
Because AI allows even less skilled actors to perform highly technical activities, the number of techniques or tools used no longer correlates with threat level. Attackers can now appear similar regardless of their actual expertise.
What does this mean for cybersecurity defenses?
Defenses must adapt to recognize AI-enabled attack patterns and focus less on technique count and more on the context and timing of AI use during an attack cycle.
Are AI-driven attacks more frequent or just more sophisticated?
Both. The report indicates an increase in attack activity, with AI making attacks more complex and effective, especially after breach, which heightens overall threat levels.
Will this trend continue or accelerate?
Given the rapid proliferation of AI tools and models, it is likely that AI-enabled attacks will continue to grow in sophistication and prevalence in the near future.
Source: ThorstenMeyerAI.com
