Post

@attack.mitre.org

ATT&CK v20 is here! This release brings more coverage of attacks on critical infrastructure, with new Campaigns for the 2026 attacks on U.S. water utilities and an AI-assisted breach of Mexican government infrastructure that spanned IT and OT. medium.com/mitre-attack...

medium.comATT&CK v20: Critical Infrastructure Campaigns, Adversary Use and Abuse of AI, & Iranian CyberMore critical infrastructure and cross-domain activity into the framework, and Abuse of AI

15/10/26, 7:07 pm1 repost2 likes

Skillthropic

@skillthropic.com

Excellent! I’ll have to update our interactive MITRE ATT&CK modeling tool. www.skillthropic.com/mitre-attack

skillthropic.comInteractive MITRE ATT&CK Matrix | SkillthropicExplore all 15 tactics, 222 techniques and 475 sub-techniques of MITRE ATT&CK Enterprise v19.2. Click any cell for plain-English detail, mitigations, detections and exam relevance, walk 6 real-world a...

MITRE ATT&CK

@attack.mitre.org

ICS ATT&CK also added Techniques for command and script execution & command and control, and ICS Detection Strategies now know which Assets they apply to. CTI added Iran-linked NIMBUS MANTICORE and its toolkit, plus updates to Salt Typhoon and APT38. attack.mitre.org/resources/up...

attack.mitre.orgUpdates - Updates - October 2026 | MITRE ATT&CK®

janiicklj54.bsky.social

@janiicklj54.bsky.social

Rather than merely expanding the technique catalog, mapping ICS Detection Strategies to specific assets makes the update operational for defenders. That linkage should help teams prioritize telemetry and expose visibility gaps around command execution and C2.

paxconsulting.blogChina’s ambitionsUsing the U.S. recommendation that Spain terminate its Huawei contract—linked to Spain’s lawful interception system—as a starting point, we examined China’s cyber activities. In additio…

MITRE ATT&CK

@attack.mitre.org

Enterprise ATT&CK added Techniques for adversary use and abuse of AI, MFA bypass, and getting past CAPTCHAs, and Mobile brought back a Technique for delivering malicious apps outside official stores.