📊 Full opportunity report: The Frameworks Can’t See the Thing That Matters: A Year of AI-Enabled Cyber Threats on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
A recent analysis shows AI is increasingly used by cybercriminals to enhance attack capabilities, blurring distinctions between skilled and unskilled actors. This shift challenges traditional threat assessment frameworks and raises new security risks.
New research from Anthropic indicates that AI is increasingly used by cybercriminals to conduct more sophisticated attacks, fundamentally altering threat assessment methods used by security professionals. The findings reveal that AI-enabled techniques are now more accessible to less skilled actors, complicating the traditional indicators of threat level.
Anthropic analyzed 832 accounts banned for malicious cyber activity between March 2025 and March 2026, mapping their techniques onto the MITRE ATT&CK framework. The study found that 67.3% of these accounts used AI to prepare for attacks, primarily for malware creation. Notably, the use of AI shifted from initial access techniques to post-compromise activities such as lateral movement and account discovery, with a significant increase over the year.
Specifically, AI-assisted lateral movement activities grew from 33% to 56% of actors, indicating a trend toward deeper, more complex intrusions. The report emphasizes that AI now enables less skilled actors to perform tasks previously requiring expertise, such as navigating inside networks or escalating privileges. This democratization of attack capabilities challenges the assumption that only highly skilled actors pose the greatest threat.
Furthermore, traditional threat indicators—such as the number of techniques used or the tools employed—no longer reliably distinguish high-risk actors. The analysis shows that both low- and high-skill actors now employ similar technique counts (around 16-20), with AI filling in the technical gaps. The report highlights that the critical differentiator is where in the attack lifecycle AI is applied, with more dangerous actors focusing on operationally demanding techniques.
The frameworks can’t see the thing that matters
For decades, danger meant which techniques an attacker commands. A year of real AI-enabled attacks — 832 banned accounts mapped onto MITRE ATT&CK — shows that signal breaking, just as a new, harder-to-see one takes over.
A year of real misuse, mapped to the standard taxonomy
A window, not a census — these are the cases with enough detail to assess techniques thoroughly. Inside it, the risk level climbed fast.
WHAT WAS STUDIED
THE RISK CLIMB · MEDIUM-OR-HIGHER ACTORS
Python Scripting for Cybersecurity: Linux Edition: Volume 2 – Log Analysis, Network Visibility, and Threat Detection with Hands-On Python Projects
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
“More techniques” stopped meaning “more dangerous”
The old heuristic: count the techniques, judge the tooling. AI dissolved it — because the model supplies the techniques either way. Watch the old signal fail, then watch what it misses.
Risk score vs. technique count
Two ways to read the same attacker. One is going blind. Press play.
AI-powered malware analysis tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Deeper into the attack — and into less-skilled hands
Across the year, AI use drifted from getting in toward acting once already inside — the operationally demanding stages that used to require an expert.
The attack lifecycle · where AI is now applied
The center of gravity moved right — toward post-compromise work.
Network Intrusion Detection
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From “what they know” to “what they’ve built”
The report sorts the signals into three tiers — one dead, one fading, one durable.
Technique count & tooling
16 vs. 20 between novice and expert; platform doesn’t correlate. The model supplies the techniques either way.
Where in the lifecycle AI is applied
Concentrating on operationally demanding, post-compromise stages is a better signal — but it’s eroding as the whole population heads there.
The scaffolding around the model
Architectures that let the model chain stages and run with minimal human input. Not what they know — whether they’ve built a system that lets AI run the attack.
cybersecurity monitoring hardware
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Fixing the map before the territory moves again
A taxonomy that can’t name the most dangerous behavior on the field will quietly mislead the people relying on it. The response runs in two directions.
Fed back into the models
The findings informed safeguards on the most capable models, built to detect & block some of what was observed:
- Blocking malware development
- Blocking mass data exfiltration
- Putting tools in defenders’ hands first (Project Glasswing)
Taking it to the source
Following the Verizon work, Anthropic says it’s in discussions with MITRE about how ATT&CK might evolve:
- A vocabulary for agentic orchestration
- Naming the scaffolding that makes a model an operator
- An interactive technique visualization on the Red blog
Reading it in proportion
- The 832 cases are a detailed subset, not the full population — the precise percentages are directional, not definitive.
- “More autonomous” is not “fully autonomous” — even the standout case needed human input at key moments, which is itself a place for defenders to intervene.
- This is one vendor’s window — the company with visibility into misuse of its own model, publishing what it found. The right thing to do with the data, and worth remembering as you read it.
Implications of AI-Driven Attack Evolution for Cyber Defense
This shift signifies that threat assessment based on technique diversity and tooling is becoming obsolete. Attackers’ use of AI to perform complex tasks reduces the skill barrier, increasing the threat landscape’s complexity. Security teams must now reconsider how they evaluate risk, as traditional metrics no longer reliably identify the most dangerous actors. The findings underscore the urgent need for new detection strategies that account for AI-enabled attack behaviors.
Historical Limits of Traditional Threat Evaluation
For decades, cybersecurity professionals have gauged attacker danger by counting techniques and analyzing tools, assuming that more techniques indicated higher threat levels. This heuristic was effective because technical skill correlated with technique variety and sophistication. However, recent advances in AI, particularly frontier models, are disrupting this correlation.
Prior to this report, the industry recognized that AI could automate certain attack tasks, but the extent to which it democratized complex operations remained unclear. The analysis from Anthropic provides a rare real-world snapshot of how AI is actively changing attacker profiles, making previously skilled activities accessible to less experienced actors.
“Our analysis indicates that the link between attacker skill and the number of techniques used is breaking down, as AI performs complex tasks on behalf of less skilled actors.”
— Anthropic researchers
Unclear Impact of AI on Future Threat Assessment Models
It remains uncertain how cybersecurity frameworks will adapt to these changes. While the report underscores the inadequacy of current threat indicators, it is not yet clear what new metrics or methods will effectively identify high-risk actors in an AI-enabled environment. The long-term evolution of attacker strategies and the development of counter-AI detection tools are still emerging areas.
Next Steps for Cybersecurity in an AI-Driven Threat Landscape
Security agencies and organizations will need to develop new threat assessment models that incorporate AI activity patterns and operational behaviors. Ongoing research will focus on identifying reliable indicators of danger that are less susceptible to AI’s influence. Additionally, efforts to improve AI detection and attribution are expected to intensify as defenders seek to counter increasingly sophisticated, AI-enabled attacks.
Key Questions
How does AI change the way attackers operate?
AI enables attackers to automate complex tasks like lateral movement and account discovery, which previously required technical expertise. This lowers the skill barrier and broadens the pool of capable threat actors.
Why are traditional threat indicators no longer reliable?
Because AI can perform multiple techniques on behalf of less skilled actors, the number of techniques used no longer correlates with threat level. Both novice and advanced attackers now employ similar tactics, making it harder to distinguish danger based on technique count or tool type.
What does this mean for cybersecurity defenses?
Defenders must develop new methods that focus on attack behaviors and operational patterns rather than just technique diversity. Monitoring AI activity and understanding how it is integrated into attack workflows will be crucial.
Are there any solutions to counter AI-enabled attacks?
Research is ongoing into AI detection and attribution tools, but no definitive solutions are yet in widespread use. Organizations should enhance their behavioral analytics and threat hunting capabilities to better identify AI-assisted malicious activities.
Source: ThorstenMeyerAI.com
