Artificial Intelligence

MITRE Releases ATT&CK v20 with AI Abuse and Water Utility Attacks

The latest version of the MITRE ATT&CK framework expands adversary tradecraft coverage with new strategies targeting enterprise artificial intelligence systems, multi-factor authentication, and industrial control systems.

Radwan AbdulhadiEditor and technology writer

Published: October 19, 2026 · Updated: October 19, 2026 · 4 min read

MITRE Releases ATT&CK v20 with AI Abuse and Water Utility Attacks — Image: SecurityWeek

Overview of ATT&CK v20 and Enterprise Additions

MITRE has officially released version 20 of its widely utilized ATT&CK framework, featuring significant updates designed to capture modern adversary tradecraft. According to the organization, the primary focus of this release is expanding coverage of recent adversary behaviors, particularly how attackers bypass security layers like multi-factor authentication, bot checks, and artificial intelligence systems.

The Enterprise domain has received nine additions spanning both techniques and sub-techniques. A major point of emphasis in this update is AI abuse, with prompt injection now categorized into two distinct techniques: malicious instructions typed directly into a Large Language Model interface and instructions hidden within material ingested by the model. Additional techniques address attackers leveraging an organization's own AI agents to exfiltrate data, poisoning web content to manipulate AI search recommendations, and disrupting LLM-assisted malware analysis.

Bypassing Authentication and Security Controls

In addition to artificial intelligence tracking, ATT&CK v20 introduces methods focused on overcoming standard authentication defenses. A newly introduced technique follows the theft of application-specific passwords, which allow malicious actors to log in successfully without triggering an MFA prompt. Furthermore, another technique targets CAPTCHA checks through sub-techniques built for automatically solving or entirely avoiding them.

The framework also updates its coverage on software dependencies and development tools. The relevant sub-technique now explicitly accounts for integrated development environment (IDE) and coding agent configuration files, helping security teams understand how upstream components can be weaponized during software supply chain compromises.

Industrial Control Systems and Water Utility Incidents

Within the Industrial Control Systems (ICS) domain, the updated framework documents critical real-world infrastructure attacks. One notable campaign chronicles intrusions targeting internet-exposed programmable logic controllers at more than thirty water and wastewater facilities in Minnesota, which left operational personnel locked out of their systems. While initial speculation associated the broader wave with Iranian-affiliated operations, MITRE clarified that formal attribution for the Minnesota intrusions remains unconfirmed.

A second documented ICS campaign covers an AI-assisted breach of Mexican government institutions that bridged information technology and operational technology environments, ultimately reaching a municipal water utility. Additionally, the ICS domain incorporates the Command and Scripting Interpreter Technique with sub-techniques for six distinct interpreters, replacing older command-line and scripting methods. Two new sub-techniques track command and control traffic hidden inside DNS and publish/subscribe protocols.

Threat Actor Tracking and Mobile Updates

ATT&CK v20 also refines entries for several prominent threat actor groups and their evolving tooling. The framework added Nimbus Manticore, an espionage group associated with Iran's Islamic Revolutionary Guard Corps that targets aerospace, defense, and telecommunications companies. Meanwhile, the entry for China-backed Salt Typhoon has been updated to reflect its exploitation of network edge devices, and North Korea's APT38 entry highlights a strategic shift from direct financial theft to software supply chain attacks. The framework also incorporates ransomware-as-a-service group The Gentlemen.

For mobile platforms, MITRE has reintroduced a technique for delivering malicious applications outside official app stores, which was previously featured in version 11. The framework also integrates NGate, specialized mobile malware that relays payment card data via near-field communication to facilitate unauthorized cash withdrawals at ATMs.

New Detection Strategies and Analytics

To support defenders reacting to these evolving techniques, ATT&CK v20 delivers 15 new detection strategies—six for Enterprise environments and nine for ICS—backed by 38 distinct analytics. The newly formulated ICS analytics are intentionally tailored to ignore routine engineering and maintenance procedures to minimize false positives for system operators.