ThreatDown Research: Guardrail-Free AI Has Gone Mainstream, Fueling a New Era of Cybercrime

ThreatDown, a leader in elite Managed Detection and Response (MDR), released its 2026 Cybercrime in the age of AI report, featuring new research that reveals that the AI tools enabling modern cybercrime are increasingly open, mainstream and difficult for defenders to monitor.

Also Read: CIO Influence Interview with Hugo Dozois-Caouette, CTO and Co-founder at MaintainX

While much of the AI security discussion has focused on future threats, ThreatDown researchers found that many of the technologies enabling AI-powered cybercrime are already openly available through mainstream platforms, cloud providers and commercial services. Together, those findings suggest that AI has lowered the barrier to sophisticated attacks while making the criminal ecosystem harder to disrupt.

The report combines ThreatDown’s original threat research with analysis of publicly available AI models, criminal AI marketplaces, and emerging attack techniques to document how AI is reshaping today’s threat landscape and why organizations have a narrowing window to prepare for what comes next.

Guardrail-free AI has gone mainstream

The report’s first major finding challenges the assumption that dangerous AI lives exclusively on the dark web. ThreatDown researchers identified 6,644 AI models published openly on Hugging Face under self-declared labels such as “abliterated,” “uncensored,” “decensored,” “heretic,” and “unfiltered”: terms signaling the models no longer refuse requests mainstream AI systems would reject.

Together, those models were downloaded more than 22 million times in a single 30-day period.

Unlike subscription-based malicious AI services that rely on remote providers, these models can be downloaded, run locally, and modified without requiring specialized expertise.

Once operating on a local machine, they leave no prompts for AI providers to monitor and no accounts to suspend, leaving defenders with far fewer opportunities to detect their use.

For security teams, the implication is significant: malicious AI is moving offline, reducing many of the traditional opportunities to detect or disrupt its use.

Criminal AI doesn’t build its own intelligence. It rents it.

ThreatDown’s second major finding challenges another common assumption: that cybercriminals are building sophisticated AI platforms from scratch.

Instead, researchers mapped an ecosystem of malicious AI services that largely package, resell, or wrap legitimate frontier AI models using mainstream cloud infrastructure.

Among the storefronts examined, tools such as WormGPT, Kriminal, DadGPT, and Xanthorox, which presented themselves as legitimate software platforms, were found to rely on infrastructure and services from legitimate technology providers—including Cloudflare, Google Cloud, Anthropic, xAI, Vercel, DeepSeek and Alibaba—illustrating how criminal AI increasingly depends on legitimate mainstream platforms rather than bespoke infrastructure.

“The criminal AI market doesn’t build its own intelligence. It rents it,” said Kendra Krause, General Manager at ThreatDown. “That changes how defenders need to think about the problem. There isn’t a single criminal supply chain to dismantle or a single platform to shut down. Organizations need visibility into what’s happening inside their own environments, because the infrastructure powering these services increasingly looks like the same infrastructure powering legitimate AI.”

Many criminal AI services now resemble conventional SaaS businesses, complete with websites, subscriptions, and payment systems. As the report observes, “the disclaimer is the camouflage.”

AI adoption is creating new opportunities for attackers

The report also finds that organizations are expanding their own attack surfaces as employees rapidly adopt AI tools outside established governance processes.

Nearly half of employees using generative AI at work do so through personal, unmanaged accounts, according to Netskope, creating a growing shadow AI environment that security teams often cannot see. At the same time, ThreatDown researchers documented malicious AI agent skills designed to steal credentials, exfiltrate sensitive data, install malware, and manipulate AI agents or the people operating them.

As organizations embrace AI to improve productivity, attackers are increasingly exploiting that same enthusiasm through malicious tools, deceptive downloads, and AI-enabled social engineering.

The next phase may arrive within six months

While today’s AI-powered threats are already changing cybercrime, the report warns that an even more consequential shift is approaching.

In May 2026, Google Threat Intelligence Group disclosed what it believes to be the first known zero-day exploit developed by criminals using AI. Only a month earlier, Anthropic unveiled Mythos Preview, an advanced AI model capable of discovering and exploiting software vulnerabilities at an unprecedented scale, a capability so sensitive that access was initially restricted to trusted defenders. Mythos was not involved in the GTIG case, but it signals the capability class ThreatDown expects to proliferate.

ThreatDown researchers assess that models with comparable capabilities are likely to reach criminal marketplaces within approximately six months.

Their arrival could sharply increase the volume of newly discovered vulnerabilities, pressuring organizations already struggling to keep pace with patch management. It would also give attackers more openings to weaponize freshly disclosed flaws.

“The question is no longer whether AI will reshape cybercrime,” said Shawn Dorsey, Sr. Director, Managed Services at ThreatDown. “The transformation is already underway. Organizations that improve visibility into AI use, strengthen identity security and accelerate vulnerability management now will be far better positioned than those waiting for these capabilities to become mainstream.”

Three priorities for the next six months

The report concludes with three immediate recommendations for organizations preparing for the next generation of AI-enabled threats:

1. Patch like the clock is running. AI-powered vulnerability discovery will multiply the software fixes organizations must manage. Automated vulnerability assessment and disciplined patch management will become increasingly critical.
2. Monitor continuously 24/7. AI makes attackers faster and more scalable, but it does not change their objectives. Continuous monitoring through a security operations center or MDR service remains essential for detecting identity-based attacks and endpoint compromise.
3. Find and govern shadow AI. Unsanctioned AI tools, AI agents, and MCP connections create security, privacy, and compliance risks organizations cannot defend against until they discover them.

Catch more CIO Insights: What Does “Job-Ready” Really Mean in IT and Cybersecurity?

[To share your insights with us, please write to psen@itechseries.com ]