MITRE ATT&CK v20 adds AI abuse and MFA bypass coverage

MITRE has published version 20 of its ATT&CK knowledge base, adding coverage of AI abuse, multi-factor authentication bypass and attacks on water utilities, according to a report by SecurityWeek on 19 October 2026.

ATT&CK is a free catalogue of the tactics and techniques that attackers use in the real world. Defenders use it as a shared vocabulary for describing intrusions, for mapping which threats their tooling can see, and for writing detection rules.

The headline change in v20 is a set of 15 new detection strategies, SecurityWeek reported. Six of those cover enterprise environments and nine cover industrial control systems, the operational technology that runs physical processes such as pumps, valves and treatment plants. The new strategies are backed by 38 analytics, the publication said.

The inclusion of AI abuse in the catalogue matters for anyone running AI agents, because ATT&CK entries tend to become the reference points that security vendors and in-house teams build detections against. Once a behaviour has a technique identifier, it can be tracked, counted and tested in a consistent way across products. Until now, teams describing AI-related attacker behaviour have largely had to improvise their own labels.

The addition of MFA bypass reflects a category of technique in which an attacker defeats or sidesteps a second authentication factor rather than simply stealing a password. The water utility content sits on the ICS side of the framework, where the nine new detection strategies are concentrated.

SecurityWeek did not detail in its summary which specific techniques were added under each heading, or how the new analytics are intended to be deployed. MITRE publishes ATT&CK content publicly, and organisations typically fold new versions into their own detection engineering backlogs over the weeks following a release.

For security teams, the practical next step is a mapping exercise: checking whether existing logging and monitoring can actually produce the data the new analytics expect. Detection strategies are only useful if the underlying telemetry is being collected, and ICS environments in particular often have limited logging compared with corporate IT networks.

The release is the twentieth major version of the framework. No vulnerabilities or active incidents were disclosed as part of the update, and the report described the changes as additions for defenders rather than responses to a specific breach.