ATT&CK v19: The Defense Evasion Split, ICS Sub-Techniques, New AI & Social Engineering Coverage...

The latest updates to the MITRE ATT&CK framework introduce several significant changes, particularly focusing on expanding coverage for AI-enabled techniques and social engineering behaviors. Additionally, there are substantial structural updates to ICS (Industrial Control Systems) sub-techniques aimed at enhancing granularity and actionability.

Key Updates:

1. AI & Social Engineering Techniques:

• T1682: Query Public AI Services
  This technique covers how adversaries use public AI services for large-scale target research and operational planning.

• T1683: Generate Content
  This includes sub-techniques like T1683.001 (Written Content) and T1683.002 (Audio-Visual Content), detailing how adversaries generate content manually, through third parties, or with AI assistance.

• T1684: Social Engineering
  This new parent technique captures trust-based manipulation across various channels such as email, voice, collaboration platforms, and help desk interactions to prompt user-authorized actions. Sub-techniques include:

  • Impersonation (T1684.001)
  • **Email Spoof

Read the full article at Malware Analysis, News and Indicators - Latest topics

---

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.