{“lastseen”:”2025-11-21T12:05:14″,”description”:”From Anthropic:\\n\\n\\u003e In mid-September 2025, we detected suspicious activity that later investigation determined to be a highly sophisticated espionage campaign. The attackers used AI\u2019s \u201cagentic\u201d capabilities to an unprecedented degree\u00ad–using AI not just as an advisor, but to execute the cyberattacks themselves.\\n\\u003e \\n\\u003e The threat actor–\u00adwhom we assess with high confidence was a Chinese state-sponsored group–\u00admanipulated our Claude Code tool into attempting infiltration into roughly thirty global targets and succeeded in a small number of cases. The operation targeted large tech companies, financial institutions, chemical manufacturing companies, and government agencies. We believe this is the first documented case of a large-scale cyberattack executed without substantial human intervention.\\n\\u003e \\n\\u003e [\u2026]\\n\\u003e \\n\\u003e The attack relied on several features of AI models that did not exist, or were in much more nascent form, just a year ago:\\n\\u003e \\n\\u003e 1. _Intelligence_. Models\u2019 general levels of capability have increased to the point that they can follow complex instructions and understand context in ways that make very sophisticated tasks possible. Not only that, but several of their well-developed specific skills–in particular, software coding\u00ad–lend themselves to being used in cyberattacks. \\n\\u003e 2. _Agency_. Models can act as agents–\u00adthat is, they can run in loops where they take autonomous actions, chain together tasks, and make decisions with only minimal, occasional human input. \\n\\u003e 3. _Tools_. Models have access to a wide array of software tools (often via the open standard Model Context Protocol). They can now search the web, retrieve data, and perform many other actions that were previously the sole domain of human operators. In the case of cyberattacks, the tools might include password crackers, network scanners, and other security-related software.”,”published”:”2025-11-21T12:01:36″,”modified”:”2025-11-18T17:14:37″,”type”:”schneier”,”title”:”AI as Cyberattacker”,”source”:””,”references”:””,”id”:”SCHNEIER:BBAF6ED5FDB4E327FDCCBA0077A3986D”,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.schneier.com\/blog\/archives\/2025\/11\/ai-as-cyberattacker.html”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-11-21T12:05:14″,”description”:”From Anthropic:\\n\\n\\u003e In mid-September 2025, we detected suspicious activity that later investigation determined to be a highly sophisticated espionage campaign. The attackers used AI\u2019s \u201cagentic\u201d…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,13,33,114,7,11,5],"class_list":["post-27182","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-schneier","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n