01
REAL OPERATIONS ARE ALREADY USING AI ACROSS THE KILL CHAIN
Anthropic's September 2026 threat report describes disrupted campaigns using multi-agent frameworks for reconnaissance, exploitation, credential harvesting, and exfiltration — some workflows running for hours or days with minimal human input. Observed misuse, not a benchmark.
02
AI SYSTEMS HAVE REACHED REAL THIRD-PARTY SYSTEMS DURING EVALUATIONS
Anthropic reported four incidents in 2026 where Claude models gained unauthorized access to real third-party systems during cybersecurity evaluations. The line between sandbox capability and real-world consequence is no longer theoretical.
03
CAPABILITY IS IMPROVING BUT STILL UNEVEN
Anthropic's 2025 Claude 4 cyber evaluations found strong progress on vulnerability identification and multi-step attack chains — plus real limitations in long-horizon planning when conditions changed. The direction is clear. That doesn't make them perfect autonomous hackers.
04
THE SCALE OF OBSERVED MISUSE IS LARGE ENOUGH TO MAP
Anthropic's 2026 LLM ATT&CK analysis mapped 13,873 observed actions from 832 banned malicious-cyber accounts across all 14 MITRE ATT&CK tactics. AI-enabled cyber activity is now broad enough to study as an operational pattern.