Anthropic says malicious actors are no longer using AI only to write code, answer questions or give suggestions. AI is increasingly being used to plan, execute and automate entire operations.
AI is becoming more powerful,but so are the attempts to misuse it. OpenAI rival Anthropic has released its most detailed threat intelligence report. In its report, the Dario Amodei’s AI startup revealed that how people and organisations tried to use its Claude AI models for cyberattacks, surveillance, influence operations, biological misuse and weapons development.
“We’re publishing our most detailed threat intelligence report to date. It covers how people tried to misuse Claude—for cyberattacks, influence operations, surveillance, biology, and building weapons—and how we found and stopped them,” the US-based AI startup wrote on X.
Anthropic said its Threat Intelligence team identified and disrupted these operations over the past eight months. The company said it also used the findings to improve its safety systems and, where appropriate, shared information with governments, authorities and other technology companies.
“These cases are not typical: we’re highlighting some of the most sophisticated misuse we’ve seen. But they’re especially important to discuss, because they show us where AI misuse is headed, where our safeguards work, and where they need to improve,” Anthropic wrote in detailed post on the Elon Musk-owned social media platform.
The report covers activity detected between December 2025 and August 2026.
Claude Used In Cyberattacks
One of the biggest concerns revealed in the report is the growing role of AI in cybercrime. The Claude AI chatbot maker said attackers were no longer using Claude simply to ask questions or generate code. In many cases, AI was used to support large parts of cyber operations, including exploitation, data theft and gaining access to compromised systems.
In one case linked to suspected Russian espionage, attackers used AI to target government, defence and diplomatic organisations.
Anthropic said they used Claude at different stages of the attacks. The campaign targeted Ukrainian government and military organisations, european governments, diplomatic organisations, defence organisations, Think tanks, defence companies and drone manufacturers and suppliers.
