MITRE ATT&CK v20 adds AI abuse, MFA bypass, and utility attacks
Enterprise gains nine entries, ICS adds two campaigns plus analytics, and Mobile restores sideloading and NGate.
61
- Mentions · 7d0
- Mentions · 30d2
- All mentions7
- First seenAug 11, 2026
- Last mentioned11d ago
Timeline
7 articles · newest firstMITRE ATT&CK v20 Adds New AI Attack Techniques for Prompt Injection and Data Theft
MITRE ATT&CK v20 adds Enterprise techniques for prompt injection, AI exfiltration and result poisoning.
63
CISA Urges Critical Infrastructure to Plant Decoys Inside Networks
CISA's first decoy guidance tells critical infrastructure to deploy honeytokens and tripwires inside networks, mapped via MITRE ATT&CK and Engage, to speed detection.
50
CISA wants critical infrastructure orgs and smaller security teams to start using cyber decoys
CISA released guidance, "Using Cyber Decoys to Strengthen Detection and Response," helping resource-constrained teams deploy honeytokens and honeypots with existing tools.
42
Using Cyber Decoys to Strengthen Detection and Response
CISA released guidance on cyber decoys—tripwires, breadcrumbs, honeytokens—to help defenders detect adversaries using valid credentials and living-off-the-land techniques.
28
Evidence-Grounded Retrieval for Investigation Hunt Lead Generation from CTI Reports
AHLERT generates environment-aware threat hunting leads from CTI reports using ATT&CK-seeded knowledge graph retrieval, roughly doubling F1 over flat-RAG baselines.
45
Microsoft's August 2026 Patch Tuesday addresses 398 CVEs (CVE-2026-68820)
Tenable reports Microsoft's August 2026 Patch Tuesday addresses 398 CVEs including three zero-days, one exploited in the wild (CVE-2026-68820).
77
Related CVEs
by mentions- CVE-2026-68820<1%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
- CVE-2026-6726<1%7.9Info Leak in TCG TPM 2.0 Reference Code Enables Attestation Key Forgery
- CVE-2026-6727<1%5.9Timing Side-Channel in TCG TPM 2.0 Reference Code RSA-OAEP Decryption
Appears with
- MITRE ATT&CKproduct · 4
- MITREorganization · 4
- MITRE Engageproduct · 3
- CISAorganization · 3
- CISAvendor · 2
- Salt Typhoonthreat actor · 2
- Nimbus Manticorethreat actor · 2
- The Gentlementhreat actor · 2
- APT38threat actor · 2
- BACKUPOSINTmalware · 1
- Sysdigvendor · 1
- Tenableorganization · 1
- Microsoftvendor · 1
- Azureproduct · 1
- .NETproduct · 1
- Windowsproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.