MITRE ATT&CK v20 Adds AI, MFA, and CAPTCHA Techniques

MITRE released ATT&CK v20 on October 13, 2026, adding nine Enterprise techniques including AI prompt injection, MFA-related theft, and CAPTCHA evasion.

MITRE released ATT&CK v20 on October 13, 2026, updating the Enterprise, Mobile, and ICS matrices and adding detection guidance. Report 1 describes nine new Enterprise techniques and sub-techniques, while Report 2 says nine new techniques, five of them AI-related; both cover direct and indirect prompt injection, AI-enabled exfiltration, and AI result poisoning, and Report 1 also names T1685.007 Impair Autonomous Defenses plus IDs T1699, T1698, T1700, and T1608.007. Report 1 adds T1697 for stealing application-specific passwords that can skip normal MFA, and T1696 with sub-techniques for automated CAPTCHA solving and avoiding challenges, plus ICS interpreters and DNS and publish-subscribe command and control. Report 2 states Enterprise totals of 227 techniques, 479 sub-techniques, 182 groups, and 61 campaigns, names new groups NIMBUS MANTICORE and The Gentlemen, notes updates to Salt Typhoon and APT38, and cites new campaigns on 2026 U.S. water-utility attacks and an AI-assisted Mexican government breach. It also lists ATT&CKcon 7.0 for October 27-28, 2026, in McLean, Virginia. The sources agree on the release date but differ on whether the nine additions are all techniques or a mix of techniques and sub-techniques.

• MITRE released ATT&CK v20 on October 13, 2026, updating Enterprise, Mobile, and ICS and adding detection guidance.
• Sources describe nine new Enterprise additions; Report 2 says five are AI-related and that Enterprise now has 227 techniques, 479 sub-techniques, 182 groups, and 61 campaigns.
• Named AI entries include T1699 Direct Prompt Injection, T1698 Indirect Prompt Injection, T1700 AI-Enabled Exfiltration, T1608.007 AI Result Poisoning, and T1685.007 Impair Autonomous Defenses.
• T1697 covers stealing application-specific passwords that skip normal MFA; T1696 and its sub-techniques cover automated CAPTCHA solving and avoiding CAPTCHA challenges.
• ICS coverage adds interpreters plus DNS and publish-subscribe command and control, along with mobile and ICS detection context.
• New groups are NIMBUS MANTICORE and The Gentlemen; Salt Typhoon and APT38 were updated.
• New campaigns cover 2026 attacks on U.S. water utilities and an AI-assisted breach of Mexican government infrastructure.
• ATT&CKcon 7.0 is set for October 27-28, 2026, in McLean, Virginia.