Create

Sign in to ReadmeX

or

How we handle your data: Privacy Policy

ReadmeX

Your AI reading companion

What would you like to catch up on?

Pick a briefing, or ask your own question.

Your community and people briefings stay personal to you.

MITRE ATT&CK

AI overview

Sign in and the AI will write an overview from our coverage.

Headlines · 3

  1. MITRE ATT&CK v20 adds prompt injection, AI-assisted exfiltration techniques

    The US nonprofit MITRE released MITRE ATT&CK v20 on October 13, with one of the update's main emphases being newly added AI-related attack techniques, including prompt injection, AI-assisted data exfiltration and AI result poisoning. The version also expands its coverage of other attack methods, threat groups and malware. Taiwan's iThome featured the update as one of the day's highlights in its October 15 security news roundup.

    iThome 台湾 · 🔥 0
  2. Kaspersky: AI threat intel still needs human verification

    Kaspersky Taiwan technical director Hsieh Chang-hsuan argues that generative AI lowers the bar for reconnaissance, phishing copywriting and some coding work, turning attacks from periodic to near-continuous, while the security fundamentals — patching, phishing awareness, boundary protection — remain unchanged; only the pace and scope have shifted. He says threat intelligence must be source-trustworthy, timely, contextually relevant, confidence-scored and actionable, with AI handling scale and correlation while experts validate and interpret findings, since unverified automated output can produce false positives that hurt operations. The article lays out a five-layer enterprise AI/agent defense model: enterprise boundary management, client-side AI (Shadow AI) control, agent interface and outbound-connection protection, LLM and RAG input/output validation, and core identity, endpoint, server and network security, warning that models, datasets, plug-ins and skill packages can all become supply-chain entry points (citing OWASP risks such as prompt injection and sensitive information disclosure).

    iThome 台湾 · 🔥 0
  3. Anthropic: AI-enabled attack risk can't be judged by technique count alone

    Anthropic's threat intelligence team analyzed 832 accounts banned for malicious cyber activity between March 2025 and March 2026, mapping 13,873 actions across 482 techniques and all 14 MITRE ATT&CK tactics. A state-sponsored espionage campaign it disrupted in November 2025 used 30 techniques across 13 tactics — comparable to many medium-risk actors — yet scored the maximum 100 on Anthropic's own risk methodology. The data also shows AI use shifting toward post-compromise activity, with account discovery up 8.9% and AI-assisted phishing down 8.6%, while actors rated medium risk or higher rose from 33% to 56%.

    TechRadar · 🔥 0

Experience and discussion from the community

Share my MITRE ATT&CK experienceAsk about MITRE ATT&CK

Nobody has shared their experience with MITRE ATT&CK yet.