Key points
- MITRE released ATT&CK version 20 on October 13, 2026.
- The update adds techniques for AI prompt injection and data exfiltration.
- New campaigns document attacks on US water utilities and Mexican government infrastructure.
MITRE released version 20 of its ATT&CK framework on October 13, 2026. This update affects security teams monitoring Enterprise, Mobile, and Industrial Control System domains. The release introduces new techniques for tracking command execution and command-and-control activity across industrial networks. It also adds entries for AI-enabled attacks, including prompt injection and data exfiltration. No software patch is required because this is a knowledge framework update, not a software vulnerability.
In plain English
The ATT&CK framework is a catalog of how attackers operate. Version 20 expands this catalog to include newer methods. It adds details on how hackers use artificial intelligence to steal data or poison results. It also documents how attackers move between information technology and operational technology environments. For example, the update covers an AI-assisted breach that reached a Mexican water utility. It also includes campaigns targeting more than 30 Minnesota water utilities.
The background
According to Industrial Cyber, the update adds campaigns documenting attacks on US water and wastewater utilities. It also covers an AI-assisted breach of Mexican government infrastructure that crossed IT and OT environments. MITRE added new software entries, including IOControl malware targeting Linux-based IoT and OT devices like programmable logic controllers. The release includes 15 new detection strategies and 38 analytics. These help security teams filter routine engineering activity from malicious behavior.
What changes now
Security teams can now map prompt-injection and AI-driven exfiltration incidents to standard ATT&CK IDs. The Enterprise domain gains five new AI-focused techniques. The ICS domain adds techniques for command and script execution over protocols already used in industrial networks. Mobile un-deprecated a technique for delivering malicious apps outside official stores. New detection strategies include platform and asset context for industrial control systems, helping align detection with specific assets like engineering workstations.
Who needs to act first
Teams should review their detection rules to include the new AI and industrial techniques. Check if your monitoring tools can identify prompt injection or unusual data exfiltration patterns. Update your threat hunting queries to reflect the new campaign details for water utilities. Ensure your security team understands the distinction between routine maintenance and malicious command execution in OT environments. Test your detection logic against the new analytics provided by MITRE to verify coverage.
What to do and how to stay safe: MITRE
- Review your security information and event management rules for the new AI and ICS techniques.
- Update your threat intelligence feeds to include the new campaigns and software entries.
- Train your security analysts on the new detection strategies for industrial control systems.
- Monitor your networks for unusual command execution or data exfiltration patterns.
Step-by-step guide: Phishing Risks and Protection for Small Business Operations
General security guidance from the Patch Herald newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Does ATT&CK v20 fix a security vulnerability?
No, ATT&CK is a framework for tracking adversary behavior, not software that contains vulnerabilities.
What new AI techniques are included?
The update adds techniques for direct and indirect prompt injection, AI-enabled exfiltration, and AI result poisoning.
Which industries are highlighted in the new campaigns?
The new campaigns focus on US water utilities and Mexican government infrastructure breaches.
