Anthropic hires top law firm as hackers automate AI-driven cyberattacks, defenders respond

Anthropic’s decision to enlist a heavyweight law firm comes as the AI‑driven threat landscape sharpens, according to a Singularityhub report that details how hackers are now automating cyber‑attacks with generative models. The report notes that Russian‑speaking actors leveraged multiple commercial AI services to plan, manage, and execute attacks on mis‑configured FortiGate firewalls in more than 55 countries during January‑February 2026, compromising over 600 systems by scanning for exposed login pages and exploiting reused credentials. The scale of that operation, described by Amazon security researchers in the same briefing, underscores why Anthropic is moving to protect its brand from “blacklisting” lawsuits and regulatory scrutiny, prompting the company to hire a top BigLaw firm, as reported by ABA Journal.

The legal maneuver is part of a broader defensive push that Anthropic is mounting on the technical front. In a separate VentureBeat story, the firm announced the rollout of “Claude Code Review,” a tool that automatically scans AI‑generated code for security flaws before it reaches production. The feature is positioned as a direct response to the surge in AI‑powered exploit development highlighted by Singularityhub, which says attackers now “turbocharge their search for vulnerabilities, develop new code exploits, and scale phishing campaigns” using generative models. By embedding security checks into its foundation models, Anthropic hopes to stay ahead of the automated attack pipelines that are reshaping the cyber‑risk calculus for enterprises.

Anthropic’s defensive strategy also includes market‑level initiatives aimed at bolstering trust among corporate customers. A VentureBeat article details the launch of the Claude Marketplace, which aggregates Claude‑powered tools from partners such as Replit, GitLab, and Harvey. The marketplace is framed as a “secure ecosystem” where enterprises can source AI utilities that have passed Anthropic’s internal code‑review safeguards. The move signals that the company is not only reacting to external threats but also trying to set industry standards for AI safety, a point echoed by the Singularityhub analysis that the advantage in this arms race will hinge less on raw model capability and more on how quickly defenders can integrate protective layers.

While Anthropic tightens its legal and technical defenses, the broader AI community watches the evolving cat‑and‑mouse game with caution. The Singularityhub piece warns that the balance of power could shift rapidly as both sides adopt more sophisticated generative tools. It cites the same Amazon research that found attackers used AI to “plan, manage, and conduct cyberattacks” across a global footprint, suggesting that defenders must match that speed of adaptation. Anthropic’s hiring of a top law firm, combined with its new code‑review product and marketplace, represents a multi‑pronged effort to stay ahead of the curve, but the report stresses that the ultimate outcome will depend on how swiftly the industry can operationalize AI‑driven defenses at scale.

In the meantime, corporate security teams are already deploying generative AI to augment threat‑intelligence workflows, a trend highlighted by Singularityhub’s observation that defenders are “using it to fight back.” The article concludes that the next phase of the conflict will likely be defined by who can more effectively integrate AI into real‑time detection and response, rather than who simply possesses the most powerful model. Anthropic’s recent legal and product moves therefore serve as a bellwether for the sector: as AI becomes an integral weapon for attackers, the same technology must become the cornerstone of defense.