The Future of Security Operations: AI and Human Collaboration

As a Cybersecurity Analyst, staying ahead of the ever-evolving threat landscape is a non-negotiable part of the job. But in a fast-paced environment, manually looking through multiple sources for the latest cybersecurity news can be inefficient and unsustainable. That’s what sparked the idea for the “Threat Intel Automation” project: an initiative to automate the entire […]

As someone who has been navigating the cybersecurity landscape for quite some time, I’ve seen the evolution of threat detection and response firsthand. From the days of basic antivirus programs to today’s sophisticated Endpoint Detection and Response (EDR) and Managed Detection and Response (MDR) solutions, it’s clear that artificial intelligence (AI) plays a pivotal role […]

In mid-September 2025, Anthropic's Threat Intelligence team detected and disrupted a cyber espionage campaign attributed with high confidence to a Chinese state-sponsored group designated GTG-1002. It's considered the first documented AI-orchestrated cyberattack at this scale (Involving all phases of a cyber kill chain majorly done by AI). The attackers manipulated Claude Code into acting as an autonomous attack agent by social engineering it. They built a framework using Claude Code and Model Context Protocol (MCP) tools to run the attack largely without human involvement. The AI handled 80–90% of all tactical operations, including reconnaissance, vulnerability discovery, exploitation, credential harvesting, lateral movement, and data exfiltration. Human operators only stepped in at strategic decision points like approving escalation to active exploitation or authorizing final data exfiltration.