📊 Full opportunity report: The Frameworks Can’t See the Thing That Matters: A Year of AI-Enabled Cyber Threats on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
A year-long analysis reveals AI is transforming cyberattack methods, making attackers more capable and harder to distinguish using traditional threat indicators. This shift challenges existing security frameworks and risk assessment models.
A new analysis from Anthropic shows that AI is fundamentally changing cyberattack techniques, making malicious actors more dangerous and harder to identify with traditional methods. This development matters because it undermines established threat assessment frameworks, potentially increasing cybersecurity risks worldwide.
Anthropic examined 832 banned accounts involved in malicious cyber activity from March 2025 to March 2026, mapping their techniques onto the MITRE ATT&CK framework. The findings reveal that AI is primarily used to accelerate attack preparation, such as malware creation, with 67.3% of actors employing AI for this purpose. More concerning, however, is the increased use of AI for complex activities like lateral movement within networks. The proportion of actors engaging in higher-risk activities grew from 33% in the first half of the year to 56% in the second, a roughly 1.7-fold increase.
Furthermore, AI use shifted from initial access techniques, like phishing, toward post-compromise activities. AI-assisted account discovery rose nearly 9%, while AI-driven phishing decreased by about 9%. This indicates that attackers are moving deeper into networks after initial breach, using AI to perform tasks that previously required significant technical skill. The report emphasizes that this democratization of advanced attack capabilities diminishes the effectiveness of traditional threat indicators based on the number of techniques or tools used, which no longer reliably differentiate between skilled and less skilled actors.
The frameworks can’t see the thing that matters
For decades, danger meant which techniques an attacker commands. A year of real AI-enabled attacks — 832 banned accounts mapped onto MITRE ATT&CK — shows that signal breaking, just as a new, harder-to-see one takes over.
A year of real misuse, mapped to the standard taxonomy
A window, not a census — these are the cases with enough detail to assess techniques thoroughly. Inside it, the risk level climbed fast.
WHAT WAS STUDIED
THE RISK CLIMB · MEDIUM-OR-HIGHER ACTORS
AI-powered cybersecurity threat detection tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
“More techniques” stopped meaning “more dangerous”
The old heuristic: count the techniques, judge the tooling. AI dissolved it — because the model supplies the techniques either way. Watch the old signal fail, then watch what it misses.
Risk score vs. technique count
Two ways to read the same attacker. One is going blind. Press play.
network security monitoring software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Deeper into the attack — and into less-skilled hands
Across the year, AI use drifted from getting in toward acting once already inside — the operationally demanding stages that used to require an expert.
The attack lifecycle · where AI is now applied
The center of gravity moved right — toward post-compromise work.
advanced malware analysis hardware
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From “what they know” to “what they’ve built”
The report sorts the signals into three tiers — one dead, one fading, one durable.
Technique count & tooling
16 vs. 20 between novice and expert; platform doesn’t correlate. The model supplies the techniques either way.
Where in the lifecycle AI is applied
Concentrating on operationally demanding, post-compromise stages is a better signal — but it’s eroding as the whole population heads there.
The scaffolding around the model
Architectures that let the model chain stages and run with minimal human input. Not what they know — whether they’ve built a system that lets AI run the attack.
cyber threat intelligence platforms
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Fixing the map before the territory moves again
A taxonomy that can’t name the most dangerous behavior on the field will quietly mislead the people relying on it. The response runs in two directions.
Fed back into the models
The findings informed safeguards on the most capable models, built to detect & block some of what was observed:
- Blocking malware development
- Blocking mass data exfiltration
- Putting tools in defenders’ hands first (Project Glasswing)
Taking it to the source
Following the Verizon work, Anthropic says it’s in discussions with MITRE about how ATT&CK might evolve:
- A vocabulary for agentic orchestration
- Naming the scaffolding that makes a model an operator
- An interactive technique visualization on the Red blog
Reading it in proportion
- The 832 cases are a detailed subset, not the full population — the precise percentages are directional, not definitive.
- “More autonomous” is not “fully autonomous” — even the standout case needed human input at key moments, which is itself a place for defenders to intervene.
- This is one vendor’s window — the company with visibility into misuse of its own model, publishing what it found. The right thing to do with the data, and worth remembering as you read it.
Why AI-Driven Attacks Challenge Existing Security Models
This shift matters because it complicates threat assessment. Traditional methods relied on counting techniques or analyzing tools to gauge attacker sophistication. Now, AI enables less skilled actors to perform complex, high-risk activities, eroding the link between observed behavior and threat level. As a result, security teams may underestimate risks or misjudge attacker capabilities, leaving organizations vulnerable to more dangerous intrusions.
Evolution of Cyberattack Techniques in the AI Era
Historically, threat assessment depended on the assumption that more techniques and advanced tools indicated higher danger. This framework has guided cybersecurity practices for decades. However, recent developments show AI’s role in automating and simplifying complex attack steps, making previously skilled-only activities accessible to a broader range of malicious actors. The rise of AI in cybercrime is part of a broader trend of automation and democratization of cyber capabilities, accelerating threats and challenging existing defense paradigms.
“The traditional signals used to identify dangerous actors are no longer reliable because AI levels the playing field, making technical skill less relevant.”
— Anthropic report author
Unclear Impacts and Future Threat Trajectories
It remains uncertain how quickly attackers will further integrate AI into their operations or develop new techniques that bypass current detection methods. The long-term implications of AI democratization for global cybersecurity are still emerging, and security frameworks may need significant updates to keep pace with evolving threats.
Monitoring AI-Driven Threat Evolution and Defense Strategies
Security organizations are likely to focus on developing new detection methods that go beyond technique counting, possibly integrating behavioral analysis and AI-specific indicators. Continued research and real-time monitoring of attack patterns will be crucial to adapt to the rapid evolution of AI-enabled cyber threats. Policymakers and cybersecurity firms are expected to collaborate on updating standards and defenses to counter these emerging risks.
Key Questions
How is AI changing the skills needed for cyberattacks?
AI automates complex attack tasks, reducing the need for technical expertise and allowing less skilled actors to perform sophisticated activities like lateral movement and account discovery.
Why are traditional threat indicators becoming less effective?
Because AI enables attackers to perform high-risk activities with fewer techniques and tools, the number of techniques used no longer correlates with threat level, undermining previous assessment methods.
What can organizations do to defend against AI-enabled attacks?
Organizations should develop detection strategies that analyze attacker behavior and operational patterns, rather than relying solely on technique counts or tool signatures, and stay updated on emerging AI-driven attack methods.
How soon might these trends impact cybersecurity defenses globally?
The trend is ongoing, with rapid adoption of AI in cybercrime. Defense strategies will need to evolve quickly, but the exact timeline for widespread impact remains uncertain.
Source: ThorstenMeyerAI.com
