📊 Full opportunity report: The Frameworks Can’t See the Thing That Matters: A Year of AI-Enabled Cyber Threats on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
A year-long analysis shows AI is increasing the sophistication and danger of cyberattacks, challenging existing threat assessment frameworks. Attackers now use AI for complex tasks, blurring the lines between skilled and amateur actors.
A new analysis from Anthropic indicates that AI is significantly increasing the danger posed by cyberattackers in 2026, rendering traditional threat assessment methods ineffective. The study examined over 800 malicious accounts and found that AI is being used not only to accelerate attack preparation but also to perform complex operations once inside networks, challenging previous assumptions about attacker skill levels and threat assessment frameworks.
Anthropic’s report analyzed 832 accounts banned for malicious activity between March 2025 and March 2026, mapping their techniques onto the MITRE ATT&CK framework. The findings reveal that 67.3% of these actors used AI primarily to automate attack preparation, such as malware creation. More concerning, however, is that a growing share—over 56%—of these actors employed AI for post-infiltration activities like lateral movement, a shift from initial access techniques.
Over the year, the proportion of actors engaging in medium or higher risk activities doubled, indicating a rapid escalation. The use of AI for account discovery increased by nearly 9%, while AI-assisted phishing decreased slightly, suggesting a strategic move towards deeper network penetration. Importantly, the data shows that less skilled actors are now capable of executing complex, high-risk techniques thanks to AI, eroding the traditional link between attacker skill and threat level.
Furthermore, the report notes that the tools or interfaces attackers use—such as APIs or chatbots—do not correlate with threat severity, complicating detection efforts. Instead, the focus shifts to the nature of the techniques and the attacker’s scaffolding around AI models, which now serve as a key indicator of danger.
The frameworks can’t see the thing that matters
For decades, danger meant which techniques an attacker commands. A year of real AI-enabled attacks — 832 banned accounts mapped onto MITRE ATT&CK — shows that signal breaking, just as a new, harder-to-see one takes over.
A year of real misuse, mapped to the standard taxonomy
A window, not a census — these are the cases with enough detail to assess techniques thoroughly. Inside it, the risk level climbed fast.
WHAT WAS STUDIED
THE RISK CLIMB · MEDIUM-OR-HIGHER ACTORS
Artificial Intelligence for Cybersecurity: How AI Detects Cyber Threats, Prevents Hacking, and Protects Your Data, Identity, and Smart Devices (AI Cybersecurity Mastery Series)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
“More techniques” stopped meaning “more dangerous”
The old heuristic: count the techniques, judge the tooling. AI dissolved it — because the model supplies the techniques either way. Watch the old signal fail, then watch what it misses.
Risk score vs. technique count
Two ways to read the same attacker. One is going blind. Press play.
Network Intrusion Detection
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Deeper into the attack — and into less-skilled hands
Across the year, AI use drifted from getting in toward acting once already inside — the operationally demanding stages that used to require an expert.
The attack lifecycle · where AI is now applied
The center of gravity moved right — toward post-compromise work.
cyber attack simulation software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From “what they know” to “what they’ve built”
The report sorts the signals into three tiers — one dead, one fading, one durable.
Technique count & tooling
16 vs. 20 between novice and expert; platform doesn’t correlate. The model supplies the techniques either way.
Where in the lifecycle AI is applied
Concentrating on operationally demanding, post-compromise stages is a better signal — but it’s eroding as the whole population heads there.
The scaffolding around the model
Architectures that let the model chain stages and run with minimal human input. Not what they know — whether they’ve built a system that lets AI run the attack.
advanced malware analysis tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Fixing the map before the territory moves again
A taxonomy that can’t name the most dangerous behavior on the field will quietly mislead the people relying on it. The response runs in two directions.
Fed back into the models
The findings informed safeguards on the most capable models, built to detect & block some of what was observed:
- Blocking malware development
- Blocking mass data exfiltration
- Putting tools in defenders’ hands first (Project Glasswing)
Taking it to the source
Following the Verizon work, Anthropic says it’s in discussions with MITRE about how ATT&CK might evolve:
- A vocabulary for agentic orchestration
- Naming the scaffolding that makes a model an operator
- An interactive technique visualization on the Red blog
Reading it in proportion
- The 832 cases are a detailed subset, not the full population — the precise percentages are directional, not definitive.
- “More autonomous” is not “fully autonomous” — even the standout case needed human input at key moments, which is itself a place for defenders to intervene.
- This is one vendor’s window — the company with visibility into misuse of its own model, publishing what it found. The right thing to do with the data, and worth remembering as you read it.
AI’s Impact on Threat Detection and Risk Assessment
This development matters because it fundamentally alters how cybersecurity professionals evaluate threats. The traditional metrics—technique diversity and tooling—are no longer reliable indicators of attacker danger. As AI democratizes complex attack capabilities, even less skilled actors can pose significant risks, challenging existing defense strategies and requiring new approaches to detection and mitigation.
Evolution of Cyberattack Techniques and AI Integration
Historically, threat assessment relied heavily on the number of techniques used and the sophistication of tools to gauge attacker risk. The MITRE ATT&CK framework provided a structured way to classify and compare threats. However, recent developments show AI’s role in automating and enhancing attack techniques, making skill level less relevant. The rise of AI in cybercrime has been gradual but accelerated over the past year, with attackers increasingly leveraging AI for both mundane and complex tasks, shifting the threat landscape significantly.
“Traditional indicators like technique count and tool choice are no longer reliable predictors of threat level in the age of AI-driven attacks.”
— Anthropic report author
Unclear Aspects of AI-Driven Threat Evolution
It remains uncertain how quickly threat detection systems can adapt to these changes and whether new frameworks will be developed to better assess AI-enabled threats. The long-term effectiveness of current mitigation strategies against increasingly autonomous and sophisticated AI-driven attacks is still unknown, and the pace of attacker innovation continues to evolve rapidly.
Next Steps for Cybersecurity in an AI-Enhanced Threat Environment
Cybersecurity professionals are expected to prioritize developing new detection methods that focus on attack scaffolding and behavioral signals rather than technique counts. Further research and collaboration will be necessary to update threat frameworks and improve AI-powered defense tools. Monitoring how attacker tactics evolve with AI will remain critical in the coming months.
Key Questions
How does AI change the skill level required for cyberattacks?
AI automates complex tasks like lateral movement and account discovery, enabling less skilled actors to perform high-risk activities that previously required expertise.
Why are traditional threat indicators no longer reliable?
Because AI can perform many techniques automatically, the number of techniques or tools used no longer correlates with attacker skill or threat level.
What new methods can cybersecurity teams use to detect AI-enabled attacks?
Focus is shifting toward analyzing attack scaffolding, behavioral patterns, and operational signals that indicate the use of AI in attack techniques.
Are all attackers using AI, or only some?
The data suggests a broadening trend where even lower-tier threat actors are adopting AI, making attacks more accessible and dangerous across the spectrum.
What are the implications for future threat assessments?
Threat assessment frameworks will need to evolve to account for AI’s role, emphasizing behavioral and contextual signals over technique counts.
Source: ThorstenMeyerAI.com
