threat-intel
MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks
Low
Summary
MITRE released version 20 of its ATT&CK framework, adding new techniques related to AI abuse (including prompt injection and using AI agents to steal data), MFA bypass, and attacks on water utilities. Attribution for the Minnesota attacks remains unconfirmed, and the framework now covers tools and techniques used by groups like Nimbus Manticore, Salt Typhoon, and The Gentlemen (a ransomware-as-a-service operation).
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data