📊 Full opportunity report: The Frameworks Can’t See the Thing That Matters: A Year of AI-Enabled Cyber Threats on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
A recent analysis shows AI is increasingly used by cybercriminals to enhance attack capabilities, blurring distinctions between skilled and amateur hackers. Traditional threat assessment models no longer reliably predict danger, prompting a need for new approaches.
New research from Anthropic indicates that AI is significantly increasing the danger posed by cybercriminals, undermining traditional threat assessment frameworks used by security teams.
Anthropic examined 832 accounts banned for malicious activity between March 2025 and March 2026, mapping their techniques onto the MITRE ATT&CK framework. The analysis shows that AI is primarily used to automate mundane attack preparations, such as malware creation, with 67.3% of actors employing AI for this purpose. More notably, a growing share of attackers—rising from 33% to 56% over the year—are using AI for complex, post-infiltration activities, like lateral movement within networks.
Furthermore, AI’s role has shifted from initial access techniques, like phishing, to deeper, operational tasks once inside a network. The use of AI for account discovery increased by nearly 9%, while AI-assisted phishing decreased slightly. This trend indicates that AI enables less skilled actors to perform sophisticated, high-risk activities traditionally reserved for advanced threat groups.
Crucially, the report finds that the traditional markers of threat level—technique diversity and tool choice—no longer reliably distinguish high-risk actors. Both novice and experienced hackers now use similar numbers of techniques and platforms, as AI supplies many of the complex methods, reducing the predictive value of these metrics.
The frameworks can’t see the thing that matters
For decades, danger meant which techniques an attacker commands. A year of real AI-enabled attacks — 832 banned accounts mapped onto MITRE ATT&CK — shows that signal breaking, just as a new, harder-to-see one takes over.
A year of real misuse, mapped to the standard taxonomy
A window, not a census — these are the cases with enough detail to assess techniques thoroughly. Inside it, the risk level climbed fast.
WHAT WAS STUDIED
THE RISK CLIMB · MEDIUM-OR-HIGHER ACTORS
AI-POWERED CYBERSECURITY OPERATIONS: Threat intelligence anomaly detection and automated incident response systems
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
“More techniques” stopped meaning “more dangerous”
The old heuristic: count the techniques, judge the tooling. AI dissolved it — because the model supplies the techniques either way. Watch the old signal fail, then watch what it misses.
Risk score vs. technique count
Two ways to read the same attacker. One is going blind. Press play.
WatchGuard Firebox T145 with 1 Year Basic Security Suite – Tabletop Firewall, 2.5Gb, 1Gb & SFP Ports, Enterprise Security for Branch Locations (WGT145031)
Watchguard T145 Firebox with 1 Year Basic Security Suite License (WGT145031) – The Firebox T145 delivers enterprise-grade protection…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Deeper into the attack — and into less-skilled hands
Across the year, AI use drifted from getting in toward acting once already inside — the operationally demanding stages that used to require an expert.
The attack lifecycle · where AI is now applied
The center of gravity moved right — toward post-compromise work.
Network Intrusion Detection
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From “what they know” to “what they’ve built”
The report sorts the signals into three tiers — one dead, one fading, one durable.
Technique count & tooling
16 vs. 20 between novice and expert; platform doesn’t correlate. The model supplies the techniques either way.
Where in the lifecycle AI is applied
Concentrating on operationally demanding, post-compromise stages is a better signal — but it’s eroding as the whole population heads there.
The scaffolding around the model
Architectures that let the model chain stages and run with minimal human input. Not what they know — whether they’ve built a system that lets AI run the attack.
Defending IoT Infrastructures with the Raspberry Pi: Monitoring and Detecting Nefarious Behavior in Real Time
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Fixing the map before the territory moves again
A taxonomy that can’t name the most dangerous behavior on the field will quietly mislead the people relying on it. The response runs in two directions.
Fed back into the models
The findings informed safeguards on the most capable models, built to detect & block some of what was observed:
- Blocking malware development
- Blocking mass data exfiltration
- Putting tools in defenders’ hands first (Project Glasswing)
Taking it to the source
Following the Verizon work, Anthropic says it’s in discussions with MITRE about how ATT&CK might evolve:
- A vocabulary for agentic orchestration
- Naming the scaffolding that makes a model an operator
- An interactive technique visualization on the Red blog
Reading it in proportion
- The 832 cases are a detailed subset, not the full population — the precise percentages are directional, not definitive.
- “More autonomous” is not “fully autonomous” — even the standout case needed human input at key moments, which is itself a place for defenders to intervene.
- This is one vendor’s window — the company with visibility into misuse of its own model, publishing what it found. The right thing to do with the data, and worth remembering as you read it.
Why AI-Driven Attacks Challenge Existing Threat Models
This development fundamentally alters how security teams assess threat levels. The reliance on technique count and tool sophistication as risk indicators becomes obsolete, as AI democratizes access to advanced attack capabilities. Consequently, threat actors of all skill levels can now perform high-impact operations, making it more difficult to identify and prioritize dangerous threats based on traditional heuristics.
As a result, organizations need to rethink their defense strategies, focusing less on the apparent technical complexity of attackers and more on the underlying operational signals and behavioral patterns that indicate high-risk activity. The shift also underscores the urgency for new detection methods that can account for AI’s role in threat proliferation.
Evolving Cyber Threat Landscape and AI’s Role
For decades, threat assessment relied heavily on the assumption that more techniques and sophisticated tools signaled higher danger. Traditional frameworks like MITRE ATT&CK helped categorize attacker behavior, guiding defensive measures. However, recent years have seen the rise of AI tools that automate and simplify complex attack steps, blurring the lines between skilled and amateur hackers.
The current analysis from Anthropic builds on prior concerns about AI’s potential in cybercrime, providing concrete data from a year’s worth of banned accounts. It confirms that attackers increasingly leverage AI for both mundane and complex tasks, shifting the threat landscape toward more accessible and scalable attacks.
“The traditional markers of threat level—technique diversity and tooling—are no longer reliable indicators of danger in an AI-enabled attack environment.”
— Anthropic report author
Unclear Impact of AI on Future Threat Dynamics
It remains uncertain how quickly security frameworks will adapt to these changes and whether new detection methods can keep pace with AI-enabled attack techniques. Additionally, the full scope of AI’s role across the broader threat landscape, beyond the subset analyzed, is still emerging.
Next Steps for Cyber Defense and Threat Assessment
Security organizations are expected to develop new threat models that incorporate behavioral and operational signals beyond technique count. Research into AI-aware detection tools and adaptive defense strategies is likely to accelerate, aiming to counter the increasing sophistication and accessibility of AI-driven cyber threats.
Key Questions
How does AI make attackers more dangerous?
AI automates complex attack steps, allowing less skilled actors to perform sophisticated operations such as lateral movement and account discovery, which previously required expertise.
Why can’t traditional threat assessment methods detect these new threats?
Because AI enables attackers to perform high-risk activities with fewer techniques and less technical skill, the usual indicators like technique diversity and tool choice are no longer reliable predictors of threat level.
What should organizations do to improve detection?
Organizations need to focus on behavioral and operational signals, develop AI-aware detection tools, and rethink threat models to account for AI-enabled attack capabilities.
Is this trend likely to accelerate?
Yes, as AI tools become more accessible and easier to use, the trend toward democratized, AI-enabled cyber attacks is expected to grow, making proactive adaptation essential.
Source: ThorstenMeyerAI.com
