# MITRE ATT&CK v20 Adds 9 Enterprise Techniques Covering AI Exploits, MFA Bypass, and CAPTCHA Evasion

> MITRE released ATT&CK v20 on October 13, 2026, adding nine Enterprise techniques: five AI-related (Direct Prompt Injection, Indirect Prompt Injection, AI-Enabled Exfiltration, AI Result Poisoning, Impair Autonomous Defenses) plus Steal Application Specific Passwords (T1697) and Anti-Automation Evasion (T1696, with T1696.001 and T1696.002). The release also updates ICS and Mobile and adds new detection strategies and analytics.

- **Published:** 2026-10-16T09:21:11Z
- **Last reviewed:** 2026-10-16T09:21:11Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-3719
- **ID:** TL-2026-3719
- **Severity:** INFO
- **Category:** THREAT_INTEL
- **Status:** ACTIVE
- **Detections:** 9 · **IOCs:** 2 (full data via the Threadlinqs MCP server — Purple tier)

## Description

This is a framework and taxonomy release, not an exploited vulnerability or an attributed campaign. No CVE, CVSS score, IOC, malware family or actor attribution is stated in the sources, and no active exploitation is reported. It is tracked because the new technique IDs change detection-coverage mapping for defenders.

ATT&CK v20 was released on October 13, 2026. The Enterprise matrix gains nine techniques. T1699 (Direct Prompt Injection) covers malicious instructions submitted directly to an AI system's interface. T1698 (Indirect Prompt Injection) covers malicious instructions embedded in content an AI system processes. T1700 (AI-Enabled Exfiltration) covers directing enterprise AI agents to extract sensitive organizational data. T1608.007 (Stage Capabilities: AI Result Poisoning) covers manipulating web content to influence AI search results and recommendations. T1685.007 (Disable or Modify Tools: Impair Autonomous Defenses) covers interfering with AI-assisted security tools to disrupt malware analysis. T1697 (Steal Application Specific Passwords) covers obtaining app-specific credentials to bypass standard MFA requirements. T1696 (Anti-Automation Evasion) covers circumventing bot-detection mechanisms, with sub-techniques T1696.001 (Automate CAPTCHA Completion) and T1696.002 (Avoid CAPTCHA).

The release adds new detection strategies and analytics. One source reports 15 new detection strategies and 38 analytics. The official MITRE update page reports 6 new Enterprise detection strategies for AI-related threats, 9 new ICS detection strategies for command and scripting abuse, and over 100 new ICS analytics plus dozens of Enterprise analytics. These counts differ between sources and are recorded as reported. ICS gains seven new Command and Scripting Interpreter techniques (T1701 per the MITRE page) covering PowerShell, Python, Unix Shell, JavaScript, Visual Basic and Windows Command Shell. DNS and Publish/Subscribe protocol variants are added to Standard Application Layer Protocol. On Mobile, 'Deliver Malicious Application via Other Means' (T1476) was un-deprecated (v2.0) after last appearing in v11, covering direct downloads, SMS, messaging apps, QR codes and third-party stores. NGate malware was added and 28 existing mobile entries were revised. The release encompasses 971 software entries, 182 groups and 61 campaigns across domains.

Mapping note: the platform's local ATT&CK catalog is v19.2 and does not yet contain the v20 IDs. The mitre[] entries therefore use the existing parent techniques (T1608, T1685, T1111, T1567) and ATLAS prompt-injection IDs. The v20 IDs are recorded as technique IOCs and tags and should be added to the catalog before detection-coverage mapping.

## MITRE ATT&CK

- T1111 Multi-Factor Authentication Interception
- T1608 Stage Capabilities
- T1685 Disable or Modify Tools
- T1567 Exfiltration Over Web Service
- AML.T0051.000 LLM Prompt Injection: Direct
- AML.T0051.001 LLM Prompt Injection: Indirect

## Sources

- [MITRE ATT&CK v20 Added 9 New Attack Techniques Covering AI Exploits, MFA Bypass, and CAPTCHA Evasion](https://cybersecuritynews.com/mitre-attck-v20-released/)
- [MITRE ATT&CK Updates - October 2026](https://attack.mitre.org/resources/updates/updates-october-2026/)
- [MITRE ATT&CK Updates - April 2026 (v19)](https://attack.mitre.org/resources/updates/updates-april-2026/)
- [MITRE ATT&CK v19.1 to v19.2 Enterprise changelog layer](https://attack.mitre.org/docs/changelogs/v19.1-v19.2/layer-enterprise.json)
- [SCYTHE: MITRE ATT&CK v19](https://scythe.io/scythe-labs/mitre-attck-v19)
- [Cymulate: MITRE ATT&CK v19 breakdown](https://cymulate.com/blog/mitre-attack-v19-breakdown/)

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-3719