AI-Powered Cyber Attacks: What Anthropic's Latest Report Tells Us

AI-generated, human-reviewed.

AI is no longer just a tool for innovators and defenders—it has become a powerful weapon for cybercriminals. On Security Now, the hosts dissect Anthropic's comprehensive Red Team report, which reveals how malicious actors are already using AI models like Claude to supercharge cyber attacks and why this threatens to change security as we know it.

How Anthropic Discovered AI-Powered Threats

Anthropic, an AI safety company, conducted a groundbreaking study mapping a year’s worth of abuse involving their AI models. By tracking 832 banned accounts from March 2025 to March 2026, they provided a rare look at how cybercriminals leverage large language models (LLMs) for real-world attacks.

The analysis was mapped to the MITRE ATT&CK framework—a widely used classification system for identifying every phase of a cyberattack, from initial reconnaissance to data theft and impact. This approach enabled Anthropic to categorize the exact tactics and techniques being enhanced or enabled by AI.

What Are Attackers Doing with AI?

According to Security Now, attackers most commonly use AI for:

• Building and refining custom malware and attack scripts.
• Automating the development of tools that can evade detection, such as obfuscating malicious code to bypass antivirus protections.
• Harvesting data from compromised systems using AI-generated scripts and techniques.

The report shows a clear shift: attackers are becoming less dependent on traditional technical expertise and more reliant on AI's ability to automate complex tasks. Over time, the risk level associated with these threat actors increased sharply, with the share of medium- or high-risk actors moving from 33% to 56% within just one year.

How AI Lowers the Bar for Cybercriminals

A critical insight from Anthropic’s findings, highlighted on Security Now, is that AI is empowering less skilled individuals to execute sophisticated attacks. The traditional barrier—the need for high technical skill—is being erased as AI agents automate everything from lateral movement across victim networks to remote service exploitation.

Notably, the highest-risk cases didn't always employ the widest range of techniques. Instead, their danger lay in agentic orchestration—the use of "scaffolding" or code architecture that allows AI to chain together multiple stages of an attack autonomously, sometimes with minimal human oversight.

Examples of Advanced AI-Driven Threats

The discussion on Security Now showcased one particularly alarming case from Anthropic’s report: a threat actor codenamed GTG1002 developed an AI-driven platform capable of:

• Autonomously scanning and mapping network services
• Executing real-time exploitation and pivoting within cloud environments
• Orchestrating the entire attack lifecycle, from reconnaissance to data exfiltration

This demonstrates a clear move toward AI agents handling tactical operations, letting humans focus only on strategic decisions.

Implications for Security Defenders

Security Now emphasized that defenders must adapt quickly. The MITRE ATT&CK taxonomy itself may need updating because many high-risk behaviors by AI-driven attacks don't fit current categories.

There’s also concern that enterprise security teams will soon have to counter AI adversaries operating without the oversight or constraints of mainstream, cloud-based AI models. With the proliferation of open-source and locally-run AI, attackers will face fewer restrictions, making it harder for defenders and vendors to monitor or block malicious use of LLMs.

What You Need to Know

• AI is accelerating cybercrime, automating complex techniques previously limited to skilled hackers.
• Malicious actors are increasingly using AI for high-risk activities like credential dumping, lateral movement, and persistent network access.
• Anthropic’s year-long report shows a surge in the risk and capability of attackers using AI.
• The traditional skill gap in cybercrime is eroding as AI “scaffolds” chain together attack stages independently.
• As AI models become available outside cloud platforms, attackers will avoid most current safeguards.

The Bottom Line

AI is fundamentally changing the cybersecurity threat landscape. According to Security Now, the latest research from Anthropic demonstrates that cyber attackers are not just experimenting—they are already using AI to amplify their abilities and bypass traditional defenses. Organizations must upgrade their defenses and awareness now, as the risks and tactics are moving faster than many might expect.

Stay informed with Security Now for the latest in cybersecurity trends and threats.

Subscribe here: https://twit.tv/shows/security-now/episodes/1082