Skip to content

Threat Actors

MITRE releases ATT&CK v20 with AI abuse, MFA bypass, water utility techniques

MITRE says the update broadens coverage of recent adversary activity and tradecraft.

By · 1 min read

https://breach-signal.com/threat-actors/mitre-attack-v20-ai-abuse-mfa/

Diagram illustrating the phases of a malware attack flow: Entry Point, Breaking In, Infection, Take Over, and Execution with
Visual breakdown of malware attack lifecycle phases in MITRE ATT&CK framework. Photo by AbhishekSinghTech on Wikimedia Commons

Share

SecurityWeek reports that MITRE released ATT&CK version 20 last week, adding entries that cover AI abuse, multifactor authentication (MFA) bypass, and recent attacks on water utilities.

SecurityWeek adds that MITRE says the biggest change in ATT&CK v20 expands coverage of recent adversary activity and tradecraft. Industrial Cyber quotes Amy L. Robertson as saying, “ATT&CK v20 brings more critical infrastructure and cross-domain activity into the framework.”

Tags: , ,

Was this helpful?

Join the discussion

Please read our Comment Policy before commenting. First-time comments are held for moderation. By posting a comment you agree to our Terms of Use and Privacy Policy, which explain how your name, email address and comment are used.

Your email address will not be published. Required fields are marked *

Most read

  1. Imperial County halts Sebastian Rucci’s planned datacenter
  2. Attackers exploit Discord and Ngrok for CikaBika Bot command‑and‑control
  3. Microsoft Patch Tuesday fixes over 1,400 CVEs, CISA warns of Ivanti Zero-Day
  4. CEOs see cyber-enabled fraud and phishing as top threat over ransomware
  5. Cisco Talos links Kazakhstan-nexus UAT-6275 to CIS water, energy targets