Tag
Cybersecurity Analyst is an AI agent that provides on-demand threat intelligence, incident response, and vulnerability analysis, reasoning like a senior analyst with mappings to standard frameworks.
This paper presents a reproducible pipeline for mapping CVEs to MITRE ATT&CK techniques using a curated gold dataset, and investigates the limits of using LLM-assisted labeling to expand training data, finding that LLM-generated labels do not reliably improve performance due to evaluation noise and label quality issues.
Anthropic analyzed 832 malicious accounts to map AI-enabled cyberattack techniques against the MITRE ATT&CK framework, finding that AI makes attackers more dangerous and autonomous.
DeepMind published a comprehensive framework for evaluating offensive cybersecurity capabilities of advanced AI models, analyzing over 12,000 real-world AI-powered cyberattack attempts across 20 countries and creating a 50-challenge benchmark covering the entire attack chain to help defenders prioritize security resources.
Anthropic's Frontier Red Team analyzed 832 banned accounts and found that AI is enabling more sophisticated cyber operations, with the percentage of medium- or high-risk actors increasing from 33% to 56% in less than a year. They mapped real-world AI-enabled cyber attacks onto the MITRE ATT&CK framework, revealing patterns that challenge traditional cybersecurity assumptions.
Anthropic analyzed 832 banned accounts for malicious AI-enabled cyber activity over a year, finding that AI is making attackers more dangerous by enabling more autonomous and complex attacks, and that existing frameworks like MITRE ATT&CK do not fully capture these new threats.
An open-source repository containing 754 structured cybersecurity skills for AI agents, covering 26 security domains and mapped to multiple industry frameworks, enabling agents to perform expert-level security analysis.