AI models on realistic cyber ranges
Jan 16, 2026

Summary
This post details the advancement of AI models, specifically Claude Sonnet 4.5, in succeeding at multistage cyberattacks on networks with dozens of hosts using only standard, open-source tools. This represents a significant step from previous generations that required custom toolkits. The post highlights the model's ability to autonomously recognize and exploit publicized CVEs, as demonstrated by its success in simulating the Equifax data breach. It also notes that while not always successful, the trajectory shows AI models are rapidly reducing barriers to autonomous cyber workflows, underscoring the importance of security fundamentals like prompt patching.
More from the AI-Resistant Technical Evaluation Design trail
- An alignment assessment of recent cybersecurity incidents
- Discovering cryptographic weaknesses with Claude
- Evaluating Claude’s bioinformatics research capabilities with BioMysteryBench
- A “diff” tool for AI: Finding behavioral differences in new models
- Eval awareness in Claude Opus 4.6’s BrowseComp performance