Home / Technology / MITRE ATT&CK v20: New AI & MFA Bypass Tactics Revealed
MITRE ATT&CK v20: New AI & MFA Bypass Tactics Revealed
16 Oct
Summary
- Nine new Enterprise techniques target AI systems and bypass MFA.
- Attackers can now exploit methods to circumvent CAPTCHA checks.
- Expanded coverage for ICS and mobile devices in the latest update.
MITRE's ATT&CK framework has been updated to version 20, released on October 13. This significant update introduces nine new Enterprise techniques. These techniques detail how malicious actors may target artificial intelligence systems, a growing area of concern in cybersecurity.
Furthermore, the update addresses methods for stealing application-specific passwords, which can be used to bypass multi-factor authentication (MFA) security measures. Attackers can also employ new tactics to circumvent CAPTCHA checks, adding another layer to potential security breaches.
The ATT&CK v20 also expands its coverage for industrial control systems (ICS) and mobile devices. This enhancement aims to provide better insights and detection strategies for threats targeting these critical infrastructures and widely used platforms. MITRE has included detection guidance for several of the newly described behaviors.
