People who went skeptical on recent “AI-orchestrated APT” report by Anthropic most likely haven’t tried to use their recent models coupled with custom MCP tools for intrusion security purposes. As person who did tried — I can say yes, they’re really that good. Getting Sonnet to hack shit for you isn’t even a challenge anymore, while gaining the same performance level from self-hosted models still is