When Threats Don’t Wait, Security Can’t Either

The uncomfortable part of an adaptive attack is not how quickly it starts, but how quickly it can change course. AI-assisted operations can probe environments, learn from responses, switch techniques and chain subsequent actions while an attack is still in progress. Anthropic’s 2026 analysis of 832 accounts banned for malicious cyber activity points to this shift. While much of the activity it observed focused on preparing for attacks, the highest-risk actors used AI in live operations, including autonomous execution, orchestration and real-time pivot decisions. For defenders, this creates a moving target. The attack that enters an environment may not follow the same pattern as it…