MITRE Releases ATT&CK Framework Version 20

MITRE released version 20 of its ATT&CK framework last week, adding entries for AI abuse, MFA bypass, and water utility attacks. The update includes nine Enterprise additions and 15 new detection strategies backed by 38 analytics. It also documents a campaign against 30 Minnesota water utilities and a breach of Mexican government institutions. Attribution for the Minnesota intrusions remains unconfirmed.