📊 Full opportunity report: The Frameworks Can’t See the Thing That Matters: A Year of AI-Enabled Cyber Threats on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
A year-long analysis shows AI is enabling less skilled cyber actors to perform complex attacks, undermining traditional threat evaluation methods. This shift raises new security challenges.
New research from Anthropic indicates that AI is fundamentally changing the landscape of cyber threats, making attackers more capable and harder to identify using traditional metrics. The report, based on an analysis of 832 banned malicious accounts, finds that the tools and techniques once used to gauge attacker skill no longer reliably predict threat level, as AI now assists even less skilled actors in executing complex operations.
The report examined 832 accounts banned for malicious activity between March 2025 and March 2026, mapping their techniques onto the MITRE ATT&CK framework. It found that 67.3% of these accounts used AI primarily for preparing attacks, such as malware creation, with a rising trend in post-compromise activities like lateral movement. Over the year, the proportion of actors engaging in higher-risk activities increased from 33% to 56%, with a notable shift toward deeper, more operational techniques once inside a target network. Importantly, the analysis shows that AI now enables less skilled actors to perform tasks previously requiring expertise, such as account discovery and lateral movement, eroding the traditional link between attacker skill and threat level.Furthermore, the study highlights that traditional indicators—such as the number of techniques used or the tools employed—are no longer effective in distinguishing dangerous actors. Both novice and expert actors now appear similar in technique count, and the platform or interface used offers little insight into threat capability. Instead, the report suggests that the real differentiator is where in the attack lifecycle the AI is applied, with more dangerous actors focusing AI on complex, operational tasks rather than initial access.
The frameworks can’t see the thing that matters
For decades, danger meant which techniques an attacker commands. A year of real AI-enabled attacks — 832 banned accounts mapped onto MITRE ATT&CK — shows that signal breaking, just as a new, harder-to-see one takes over.
A year of real misuse, mapped to the standard taxonomy
A window, not a census — these are the cases with enough detail to assess techniques thoroughly. Inside it, the risk level climbed fast.
WHAT WAS STUDIED
THE RISK CLIMB · MEDIUM-OR-HIGHER ACTORS
Artificial Intelligence for Cybersecurity: Develop AI approaches to solve cybersecurity problems in your organization
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
“More techniques” stopped meaning “more dangerous”
The old heuristic: count the techniques, judge the tooling. AI dissolved it — because the model supplies the techniques either way. Watch the old signal fail, then watch what it misses.
Risk score vs. technique count
Two ways to read the same attacker. One is going blind. Press play.
Python Scripting for Cybersecurity: Linux Edition: Volume 2 – Log Analysis, Network Visibility, and Threat Detection with Hands-On Python Projects
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Deeper into the attack — and into less-skilled hands
Across the year, AI use drifted from getting in toward acting once already inside — the operationally demanding stages that used to require an expert.
The attack lifecycle · where AI is now applied
The center of gravity moved right — toward post-compromise work.
The Tao Of Network Security Monitoring: Beyond Intrusion Detection
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
From “what they know” to “what they’ve built”
The report sorts the signals into three tiers — one dead, one fading, one durable.
Technique count & tooling
16 vs. 20 between novice and expert; platform doesn’t correlate. The model supplies the techniques either way.
Where in the lifecycle AI is applied
Concentrating on operationally demanding, post-compromise stages is a better signal — but it’s eroding as the whole population heads there.
The scaffolding around the model
Architectures that let the model chain stages and run with minimal human input. Not what they know — whether they’ve built a system that lets AI run the attack.
Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Fixing the map before the territory moves again
A taxonomy that can’t name the most dangerous behavior on the field will quietly mislead the people relying on it. The response runs in two directions.
Fed back into the models
The findings informed safeguards on the most capable models, built to detect & block some of what was observed:
- Blocking malware development
- Blocking mass data exfiltration
- Putting tools in defenders’ hands first (Project Glasswing)
Taking it to the source
Following the Verizon work, Anthropic says it’s in discussions with MITRE about how ATT&CK might evolve:
- A vocabulary for agentic orchestration
- Naming the scaffolding that makes a model an operator
- An interactive technique visualization on the Red blog
Reading it in proportion
- The 832 cases are a detailed subset, not the full population — the precise percentages are directional, not definitive.
- “More autonomous” is not “fully autonomous” — even the standout case needed human input at key moments, which is itself a place for defenders to intervene.
- This is one vendor’s window — the company with visibility into misuse of its own model, publishing what it found. The right thing to do with the data, and worth remembering as you read it.
Impact of AI on Threat Assessment Models in 2026
This development fundamentally challenges the longstanding security paradigm that correlates attacker skill with the number of techniques or sophistication of tools. As AI democratizes complex attack capabilities, security teams can no longer rely on traditional heuristics to prioritize threats. The ability of less skilled actors to carry out advanced operations increases the volume and diversity of threats, complicating detection and response strategies. This shift necessitates a reevaluation of threat models and highlights the urgent need for new detection methods that account for AI-enabled attack behaviors.
Evolution of Cyber Threat Assessment and AI’s Role
For decades, cybersecurity professionals assessed threat levels based on the number of techniques used, tool complexity, and actor skill. The MITRE ATT&CK framework provided a standardized way to categorize and evaluate attacker capabilities. However, recent advances in AI, especially large language models, have begun to automate and assist in complex attack tasks, lowering the skill barrier. This trend has been observed gradually, but the recent report underscores how AI’s integration into attack workflows is accelerating and transforming threat landscapes in 2026.
Prior to this shift, post-compromise activities like lateral movement and privilege escalation were limited to highly skilled actors. Now, AI tools enable less experienced actors to perform these tasks, blurring the lines of threat classification and rendering traditional heuristics less effective. The evolution underscores the need for updated threat assessment frameworks that incorporate AI-driven activity patterns.
“Our analysis indicates a significant shift in attacker behavior, with a focus on deeper, operational activities once inside a network, driven by AI assistance.”
— Anthropic’s research team
Unclear Impact of AI on Threat Detection Capabilities
While the report demonstrates how AI enables less skilled actors to perform advanced attacks, it remains unclear how current threat detection systems will evolve to counter these new tactics. The effectiveness of existing security tools against AI-assisted operations has not been fully assessed, and the long-term implications for threat intelligence and response strategies are still developing.
Next Steps for Cybersecurity in an AI-Driven Threat Environment
Security organizations will need to develop new detection and attribution methods that focus on behavioral patterns and operational signals rather than technique count or tool signatures. Ongoing research into AI-specific attack signatures and adaptive defense mechanisms is expected to increase. Additionally, policymakers and industry leaders are likely to prioritize standards and regulations for AI use in cyber operations to mitigate risks.
Key Questions
How does AI make attackers more dangerous?
AI enables less skilled actors to perform complex attack tasks, such as lateral movement and account discovery, which previously required expertise. This broadens the pool of capable attackers and increases overall threat volume.
Why can’t traditional threat assessment methods detect these new threats?
Because AI allows attackers to perform operational techniques with fewer techniques and tools, the usual indicators of threat level—such as technique diversity—no longer correlate with actual danger.
What can organizations do to adapt to this shift?
Organizations should focus on behavioral and operational signals, develop AI-aware detection systems, and update threat models to consider the new capabilities enabled by AI.
Are all attackers using AI for malicious purposes?
While the report shows a significant increase in AI-enabled attacks, not all attackers are using AI. However, the trend suggests AI will become a standard tool in malicious operations.
What are the long-term implications for cybersecurity?
The integration of AI into cyberattack workflows will likely lead to an arms race between attackers and defenders, requiring continuous adaptation and innovation in threat detection and response strategies.
Source: ThorstenMeyerAI.com
