{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/anthropic-pnnl-critical-infrastructure-emulation-2026/",
 "asOf": "2026-09-26",
 "id": "anthropic-pnnl-critical-infrastructure-emulation-2026",
 "date": "2026-01-08",
 "datePrecision": "day",
 "title": "PNNL uses a Claude-based agent to speed adversary emulation against a water treatment plant model",
 "lane": "defense",
 "kind": "paper",
 "summary": "Anthropic reports that Pacific Northwest National Laboratory built a scaffold around Claude Sonnet 4 to automate adversary emulation against a high-fidelity cyber-physical model of a water treatment plant used for CISA. PNNL estimates attack reconstruction took three hours instead of multiple weeks; in one run the model switched to a different known privilege-escalation technique when a provided tool failed.",
 "whyItMatters": "Faster adversary emulation lets critical-infrastructure defenders re-test controls more often, while the model's improvisation shows why such agents need tight scoping.",
 "actors": [
  "anthropic",
  "pnnl",
  "cisa"
 ],
 "topics": [
  "autonomous-defense",
  "capability-evaluation"
 ],
 "atlas": [
  "tools",
  "eval-environment"
 ],
 "artifacts": [
  "claude-sonnet"
 ],
 "sources": [
  {
   "url": "https://www.anthropic.com/research/critical-infrastructure-defense",
   "publisher": "Anthropic",
   "title": "Experimenting with AI to defend critical infrastructure",
   "date": "2026-01-08",
   "type": "primary",
   "accessed": "2026-09-25"
  }
 ],
 "keyFacts": [
  {
   "fact": "PNNL estimates the Claude scaffold allowed attack reconstruction in three hours instead of multiple weeks.",
   "locator": "Section 'Using AI to speed up adversary emulation'"
  },
  {
   "fact": "The simulation, run in summer 2025, used Claude Sonnet 4 against a Control Environment Laboratory Resource water treatment platform operated for CISA.",
   "locator": "Same section"
  },
  {
   "fact": "When a scaffold tool for bypassing Windows UAC failed, Claude used a different known bypass technique.",
   "locator": "Same section"
  }
 ],
 "significance": 3,
 "fideQuestions": [
  "FID-076"
 ],
 "methods": [
  "cyber-ranges"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}