MITRE ATT&CK version 20 adds more industrial and critical infrastructure threats

What happened. MITRE released version 20 of its ATT&CK framework. It adds campaigns against more than 30 Minnesota water and wastewater utilities, and CyberAv3ngers' IOControl malware that targets Linux-based devices including programmable logic controllers (PLCs). It also adds new industrial network techniques.

Who is affected. Critical infrastructure operators, including water and wastewater utilities, and users of PLCs, human-machine interfaces and fuel management systems named as IOControl targets.

What to do. Brief your team on the new ATT&CK v20 industrial techniques and IOControl, and check whether you run Linux-based PLCs or human-machine interfaces.