Mapping AI-enabled cyber threats

This post details Anthropic's analysis of AI-enabled cyber threats, mapping observed attacks onto the MITRE ATT&CK framework. It introduces a new risk-scoring framework (ARiES) to quantify the threat posed by AI-assisted actors, highlighting key findings such as the increasing sophistication of attackers and the emerging role of agentic scaffolding in enabling autonomous cyberattacks. The post also discusses limitations of current frameworks in capturing AI-driven autonomous actions and outlines how these findings inform Anthropic's internal safety classifier development and threat detection probes.