{"schemaVersion":"nuwa-current-record-1","version":"2026-10-29.1","publication":"published","work":{"id":"anthropic-threat-report","title":"Detecting and countering misuse of AI: September 2026","aliases":[],"authors":[],"primaryFunction":"governance","secondaryFunctions":[],"kind":"incident-report","sourceId":"anthropic-threat-report-publication","attributionSourceId":"anthropic-threat-report-publication","originalUrl":"https://www.anthropic.com/threat-intelligence-report-september-2026","publicationDate":null,"updatedOn":"2026-10-25","areas":["cybersecurity","cbrn","disinformation"],"scopeNote":{"en":"Relevance is assigned to the research question and stated conditions of the work. A topic tag is not a risk rating.","zh":"风险关联依据研究问题及明确条件建立，主题标签不代表风险评级。"},"protocolIds":[],"contributions":[{"organizationId":"anthropic","role":"publisher","sourceId":"anthropic-threat-report-publication","locator":"Official publication masthead and article byline"}],"summary":{"en":"Documents investigated misuse cases and interventions across several harm domains in a fixed reporting period.","zh":"记录固定报告期间内多个危害领域的滥用调查案例和干预。"},"note":{"question":null,"method":null,"finding":null,"supports":null,"limits":null,"connections":null},"resources":[],"noteStatus":{"question":"limited","method":"limited","finding":"limited","supports":"limited","limits":"limited","connections":"limited"},"noteAvailability":{"en":"A substantive NUWA research note is not yet available. The repeated draft sections were removed pending review of the original methods, findings and limitations; use the original publication for the research account.","zh":"实质性的 NUWA 研究笔记尚未完成。重复草稿章节已移除，待核查原始方法、发现与限制；研究内容请以原始出版物为准。"},"noteSourceLocator":"No complete section-level method/results/limitations review completed for this note; cached original page and any chart audit retained as discovery evidence.","tags":["incident-investigation"]},"reading":{"id":"anthropic-threat-report","title":"Detecting and countering misuse of AI: September 2026","en":{"takeaway":"The report records detected misuse and enforcement actions, with limited visibility after content leaves the platform.","question":"What can provider telemetry establish about actor use, external reach and the effect of disruption?","design":"The provider combines account/activity investigation with open-source and partner information; influence-operation reach is assessed separately from generated content volume.","findings":["A described influence network remained isolated despite generating coordinated content.","Banning linked accounts is an enforcement observation; the report also describes cases where actors re-established access."],"interpretation":"NUWA interpretation: observed model use, operation scale, external impact and lasting disruption are separate claims requiring different evidence.","limits":"Detected cases are selected, not a representative prevalence sample. Off-platform behavior and attribution confidence remain case-dependent; hazardous operational sections were not reviewed or extracted.","connections":["NUWA connection: incident reports about unintended model behavior address a different cause than deliberate user misuse; safeguard principles supply a framework for connecting telemetry to requirements."],"decisionRelevance":"NUWA recommendation: cite case-specific evidence and reach measures, keep enforcement separate from durable harm prevention, and avoid aggregate causal uplift claims."},"zh":{"takeaway":"报告记录已发现滥用与执行措施，但内容离开平台后的可见性有限。","question":"服务商遥测能确立哪些用户使用、外部触达及处置效果？","design":"服务商结合账号活动调查、公开信息及合作方资料；影响行动的触达与生成内容量分别评估。","findings":["一例协调内容网络虽然生成内容，仍局限在自身网络内。","封禁关联账号是执行观察，报告也描述了行为者重新取得访问的情况。"],"interpretation":"NUWA 解读：模型使用、行动规模、外部影响和持续中断是不同主张，需要不同证据。","limits":"已发现案例经过筛选，不是代表性发生率样本；外部行为与归属置信度逐案不同，本次未审阅或提取危险操作章节。","connections":["NUWA 关联：非预期模型行为与用户蓄意滥用成因不同；防护评估原则可把遥测连接到要求。"],"decisionRelevance":"NUWA 建议：逐案引用触达证据，区分执行措施与持久防害，避免聚合因果能力提升主张。"},"sourceRefs":[{"sourceId":"anthropic-threat-report-publication","url":"https://www.anthropic.com/threat-intelligence-report-september-2026","locator":"Report overview","version":"Selected original resource https://www.anthropic.com/threat-intelligence-report-september-2026; sha256:2ce47ee100559db24c614bad6279577f221b64a7875a2e4e2f090be9aa76721f; archived source capture; exact capture time not independently established","artifactSha256":"2ce47ee100559db24c614bad6279577f221b64a7875a2e4e2f090be9aa76721f"},{"sourceId":"anthropic-threat-report-publication","url":"https://www.anthropic.com/threat-intelligence-report-september-2026","locator":"Influence operations: How we investigate","version":"Selected original resource https://www.anthropic.com/threat-intelligence-report-september-2026; sha256:2ce47ee100559db24c614bad6279577f221b64a7875a2e4e2f090be9aa76721f; archived source capture; exact capture time not independently established","artifactSha256":"2ce47ee100559db24c614bad6279577f221b64a7875a2e4e2f090be9aa76721f"},{"sourceId":"anthropic-threat-report-publication","url":"https://www.anthropic.com/threat-intelligence-report-september-2026","locator":"How we measure reach","version":"Selected original resource https://www.anthropic.com/threat-intelligence-report-september-2026; sha256:2ce47ee100559db24c614bad6279577f221b64a7875a2e4e2f090be9aa76721f; archived source capture; exact capture time not independently established","artifactSha256":"2ce47ee100559db24c614bad6279577f221b64a7875a2e4e2f090be9aa76721f"},{"sourceId":"anthropic-threat-report-publication","url":"https://www.anthropic.com/threat-intelligence-report-september-2026","locator":"Disruption and mitigations","version":"Selected original resource https://www.anthropic.com/threat-intelligence-report-september-2026; sha256:2ce47ee100559db24c614bad6279577f221b64a7875a2e4e2f090be9aa76721f; archived source capture; exact capture time not independently established","artifactSha256":"2ce47ee100559db24c614bad6279577f221b64a7875a2e4e2f090be9aa76721f"},{"sourceId":"anthropic-threat-report-publication","url":"https://www.anthropic.com/threat-intelligence-report-september-2026","locator":"Report visibility limitations","version":"Selected original resource https://www.anthropic.com/threat-intelligence-report-september-2026; sha256:2ce47ee100559db24c614bad6279577f221b64a7875a2e4e2f090be9aa76721f; archived source capture; exact capture time not independently established","artifactSha256":"2ce47ee100559db24c614bad6279577f221b64a7875a2e4e2f090be9aa76721f"}],"publication":{"state":"published","publishedOn":"2026-10-29","authorizationReference":"user-authorized-global-index-publication-2026-10-29","reviewedCandidateId":"local-6efe31bc4a0c0f37"},"review":{"state":"published-note","sourceScope":"full-text","availableScope":null,"readingCoverage":"selected substantive sections of the full source body","completePaperAudit":false,"independentEvidenceReview":"pending-human-review","bilingualEditorialReview":"pending-human-review","authorship":"model-assisted-research-note","preparedFingerprint":"e3a09869416d479e593552fa1eda1ff42e74b5a2ba776ab725b7c3da769d3942"}},"sources":[{"id":"anthropic-threat-report-publication","title":"Detecting and countering misuse of AI: September 2026","url":"https://www.anthropic.com/threat-intelligence-report-september-2026","version":"Source capture 2026-10-25","publicationDate":null,"datePrecision":"unknown","type":"research-publication","verifiedOn":"2026-10-25","documentId":"https://www.anthropic.com/threat-intelligence-report-september-2026"}]}