MITRE Unveils ATT&CK v18 With Updates to Detections, Mobile, ICS

Keypoints

• ATT&CK v18 includes improvements across techniques, groups, campaigns, and software for better threat detection.
• The update introduces Detection Strategies and Analytics as new detection objects in the framework.
• New techniques cover modern infrastructure, cloud databases, Kubernetes, and ransomware behaviors.
• Additional threat groups and campaigns focus on supply chain attacks, cloud exploits, and virtualization threats.
• The industrial control systems section now features new assets like controllers, firewalls, and switches.