Post

@attack.mitre.org

ATT&CK v20 is here! This release brings more coverage of attacks on critical infrastructure, with new Campaigns for the 2026 attacks on U.S. water utilities and an AI-assisted breach of Mexican government infrastructure that spanned IT and OT. medium.com/mitre-attack...

medium.comATT&CK v20: Critical Infrastructure Campaigns, Adversary Use and Abuse of AI, & Iranian CyberMore critical infrastructure and cross-domain activity into the framework, and Abuse of AI

MITRE ATT&CK

@attack.mitre.org

ICS ATT&CK also added Techniques for command and script execution & command and control, and ICS Detection Strategies now know which Assets they apply to. CTI added Iran-linked NIMBUS MANTICORE and its toolkit, plus updates to Salt Typhoon and APT38. attack.mitre.org/resources/up...

attack.mitre.orgUpdates - Updates - October 2026 | MITRE ATT&CK®

MITRE ATT&CK

@attack.mitre.org

Enterprise ATT&CK added Techniques for adversary use and abuse of AI, MFA bypass, and getting past CAPTCHAs, and Mobile brought back a Technique for delivering malicious apps outside official stores.

15/10/26, 7:07 pm0 reposts0 likes

No replies yet.