📊 Full opportunity report: The Frameworks Can’t See the Thing That Matters: A Year of AI-Enabled Cyber Threats on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
A year-long analysis shows AI is empowering less skilled cyber actors to perform complex malicious activities, undermining established threat assessment frameworks. The use of AI deep inside networks is rising, making attacks harder to predict and prevent.
New research from Anthropic reveals that AI is enabling less skilled cybercriminals to carry out sophisticated attacks, disrupting traditional threat assessment models used by cybersecurity teams. The report, based on analysis of 832 banned malicious accounts, shows a significant shift in attacker behavior driven by AI tools, making threat detection more challenging.
Anthropic examined 832 accounts flagged for malicious activity between March 2025 and March 2026, mapping their techniques onto the MITRE ATT&CK framework. The findings indicate that AI is primarily used to prepare for attacks, such as malware creation, with 67.3% of actors employing AI for this purpose. More concerning, however, is the increase in AI-assisted lateral movement and network navigation, which rose sharply over the year, with 56% of actors classified as medium risk or higher in the second half of 2025.
AI’s role has shifted from initial access—like phishing—to deeper post-compromise activities. The report states that AI now performs complex tasks like account discovery and lateral movement, activities once thought to require high technical skill. This democratization of attack capabilities means less skilled actors can now execute more dangerous operations, blurring the lines between novice and expert threat levels.
The frameworks can’t see the thing that matters
For decades, danger meant which techniques an attacker commands. A year of real AI-enabled attacks — 832 banned accounts mapped onto MITRE ATT&CK — shows that signal breaking, just as a new, harder-to-see one takes over.
A year of real misuse, mapped to the standard taxonomy
A window, not a census — these are the cases with enough detail to assess techniques thoroughly. Inside it, the risk level climbed fast.
WHAT WAS STUDIED
THE RISK CLIMB · MEDIUM-OR-HIGHER ACTORS
Python Scripting for Cybersecurity: Linux Edition: Volume 2 – Log Analysis, Network Visibility, and Threat Detection with Hands-On Python Projects
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
“More techniques” stopped meaning “more dangerous”
The old heuristic: count the techniques, judge the tooling. AI dissolved it — because the model supplies the techniques either way. Watch the old signal fail, then watch what it misses.
Risk score vs. technique count
Two ways to read the same attacker. One is going blind. Press play.
Artificial Intelligence for Cybersecurity: Develop AI approaches to solve cybersecurity problems in your organization
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Deeper into the attack — and into less-skilled hands
Across the year, AI use drifted from getting in toward acting once already inside — the operationally demanding stages that used to require an expert.
The attack lifecycle · where AI is now applied
The center of gravity moved right — toward post-compromise work.
The Tao Of Network Security Monitoring: Beyond Intrusion Detection
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From “what they know” to “what they’ve built”
The report sorts the signals into three tiers — one dead, one fading, one durable.
Technique count & tooling
16 vs. 20 between novice and expert; platform doesn’t correlate. The model supplies the techniques either way.
Where in the lifecycle AI is applied
Concentrating on operationally demanding, post-compromise stages is a better signal — but it’s eroding as the whole population heads there.
The scaffolding around the model
Architectures that let the model chain stages and run with minimal human input. Not what they know — whether they’ve built a system that lets AI run the attack.
Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Fixing the map before the territory moves again
A taxonomy that can’t name the most dangerous behavior on the field will quietly mislead the people relying on it. The response runs in two directions.
Fed back into the models
The findings informed safeguards on the most capable models, built to detect & block some of what was observed:
- Blocking malware development
- Blocking mass data exfiltration
- Putting tools in defenders’ hands first (Project Glasswing)
Taking it to the source
Following the Verizon work, Anthropic says it’s in discussions with MITRE about how ATT&CK might evolve:
- A vocabulary for agentic orchestration
- Naming the scaffolding that makes a model an operator
- An interactive technique visualization on the Red blog
Reading it in proportion
- The 832 cases are a detailed subset, not the full population — the precise percentages are directional, not definitive.
- “More autonomous” is not “fully autonomous” — even the standout case needed human input at key moments, which is itself a place for defenders to intervene.
- This is one vendor’s window — the company with visibility into misuse of its own model, publishing what it found. The right thing to do with the data, and worth remembering as you read it.
Threat Assessment Models Are Becoming Obsolete
This shift significantly impacts cybersecurity strategies. Traditional threat assessments relied on counting techniques and tool sophistication to gauge danger. Now, with AI enabling less skilled actors to perform complex, deep-in-network activities, these heuristics are no longer reliable. The ability of AI to automate and execute advanced techniques means attackers of all skill levels pose an increased risk, challenging existing defense paradigms and necessitating new detection approaches.
AI’s Growing Role in Cyberattack Tactics
For decades, threat assessment depended on evaluating the number of techniques used and the sophistication of tools. The MITRE ATT&CK framework provided a standardized way to classify attacker behavior. Recent developments show AI’s integration into attack workflows, shifting the landscape. The analysis by Anthropic builds on previous reports like Verizon’s 2026 Data Breach Investigations, highlighting how AI’s capabilities are evolving from simple automation to performing complex, operational tasks inside networks.
“AI is fundamentally changing who can carry out sophisticated attacks. The old models no longer reflect reality.”
— Thorsten Meyer, AI security researcher
Unclear Impact on Future Threat Detection
It remains uncertain how cybersecurity defenses will adapt to these changes. While the report highlights the rise in AI-driven post-compromise activities, it is not yet clear what new detection methods will be effective against AI-enabled attacks or how quickly organizations can implement these solutions. The long-term evolution of attacker behavior with AI is still unfolding.
Expected Developments in AI-Driven Cybersecurity Strategies
Organizations will need to develop new threat detection frameworks that account for AI’s role in attack workflows. Future research is likely to focus on identifying AI scaffolding patterns and operational signals that distinguish malicious activity. Additionally, cybersecurity vendors may introduce AI-powered defense tools designed to counter AI-enabled threats, but the pace of adoption and effectiveness remains to be seen.
Key Questions
How does AI make attackers more dangerous?
AI automates complex attack tasks like lateral movement and account discovery, enabling less skilled actors to perform operations that previously required high technical expertise.
Why are traditional threat assessment methods no longer effective?
Because AI supplies many attack techniques automatically, the correlation between attacker skill and the number of techniques used is weakening, making it harder to distinguish threats based on technical complexity alone.
What can organizations do to defend against AI-enabled attacks?
They need to develop new detection strategies that focus on operational signals and attack scaffolding patterns, possibly leveraging AI themselves to identify malicious activity.
Will AI make cyber threats more frequent?
The report indicates that AI is being used to prepare for attacks more rapidly, which could increase attack frequency, but the overall impact depends on defense adaptations.
Is this trend reversible or temporary?
Current data suggests a fundamental shift driven by AI’s capabilities; reversing it would require significant technological and strategic changes in cybersecurity practices.
Source: ThorstenMeyerAI.com
