MITRE

Headlines · 2

1. 5d
   MITRE ATT&CK v20 adds prompt injection, AI-assisted exfiltration techniques

   The US nonprofit MITRE released MITRE ATT&CK v20 on October 13, with one of the update's main emphases being newly added AI-related attack techniques, including prompt injection, AI-assisted data exfiltration and AI result poisoning. The version also expands its coverage of other attack methods, threat groups and malware. Taiwan's iThome featured the update as one of the day's highlights in its October 15 security news roundup.

   iThome 台湾 · 🔥 0
2. Oct 8
   Anthropic: AI-enabled attack risk can't be judged by technique count alone

   Anthropic's threat intelligence team analyzed 832 accounts banned for malicious cyber activity between March 2025 and March 2026, mapping 13,873 actions across 482 techniques and all 14 MITRE ATT&CK tactics. A state-sponsored espionage campaign it disrupted in November 2025 used 30 techniques across 13 tactics — comparable to many medium-risk actors — yet scored the maximum 100 on Anthropic's own risk methodology. The data also shows AI use shifting toward post-compromise activity, with account discovery up 8.9% and AI-assisted phishing down 8.6%, while actors rated medium risk or higher rose from 33% to 56%.

   TechRadar · 🔥 0

Experience and discussion from the community

Share my MITRE experienceAsk about MITRE