Detecting and Countering Misuse of AI: September 2026 (Executive Summary)

Between December 2025 and August 2026, Anthropic's Threat Intelligence team identified and disrupted misuse of Claude across seven categories of harm: cyber operations, surveillance, influence operations, conventional weapons, biological misuse, scams/fraud, and illicit distillation. The report's central argument is that AI has collapsed the skill and resource gap that used to separate state-sponsored operations from individual actors — “sophisticated attacks no longer require sophisticated attackers.” Across every case, operations moved from Claude simply assisting a human conversationally toward more autonomous, multi-agent orchestration that ran reconnaissance, exploitation, and data theft with minimal supervision, sometimes for extended unattended stretches. Four cyber case...