MITRE has released version 20 of its ATT&CK knowledge base, adding new detection guidance for both enterprise and industrial control system (ICS) environments. The update introduces 15 detection strategies, split between six for Enterprise and nine for ICS, and is supported by 38 analytics.
Among the newly cataloged abuse patterns are attacks involving artificial intelligence, bypasses of multi-factor authentication, and incidents targeting water utilities. These additions reflect the evolving threat landscape and give defenders a common framework for recognizing and responding to such activity.
The report is based on a single source, so no conflicting details were available. SecurityWeek frames the release as a practical tool for defenders, emphasizing the concrete number of strategies and analytics rather than broader commentary.