MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks
MITRE last week released version 20 of its ATT&CK framework, adding entries that cover AI abuse, MFA bypass, and recent attacks on water utilities.
The organization says the biggest change in ATT&CK v20 is “expanded coverage of recent adversary activity and tradecraft.”
The Enterprise domain gets nine additions, counting both techniques and sub-techniques. Prompt injection is now tracked as two techniques, one for malicious instructions typed straight into an LLM’s interface and one for instructions hidden in material the model ingests.
Another technique describes attackers using an organization’s own AI agents to steal data. Sub-techniques also cover poisoning web content to sway AI search and assistant recommendations, and disrupting LLM-assisted analysis of malware.
Separately, a new technique tracks the theft of application-specific passwords, which attackers can use to sign in without an MFA prompt. Another addresses bypassing CAPTCHA checks, with sub-techniques for automatically solving them and for avoiding them.
The...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
