| Version | Start Date | End Date | Data | Changelogs |
|---|---|---|---|---|
| ATT&CK v18 | October 28, 2025 | April 27, 2026 | v18.0 on MITRE/CTI v18.1 on MITRE/CTI |
17.1 - 18.0 Details (JSON) 18.0 - 18.1 Details (JSON) |
The October 2025 (v18) ATT&CK release updates Techniques, Groups, Campaigns and Software for Enterprise, Mobile, and ICS.
The biggest changes in ATT&CK are related to the defensive portion of the framework. Detections in techniques have been replaced with Detection Strategies resulting in the addition of Detection Strategies and Analytics, major updates to Data Components, as well as the deprecation of Data Sources. ATT&CK's STIX representation, including these new objects, is described in detail in ATT&CK Data Model. A post describing the defensive changes to the ATT&CK website and the rationalle behind them was published to ATT&CK's Blog in July 2025, and an accompanying blog post describes changes across the release.
In this release the Mobile Technique Abuse Accessibility Features has been un-deprecated (last seen in ATT&CK v6).
This release also includes a human-readable detailed changelog showing more specifically what changed in updated ATT&CK objects, and a machine-readable JSON changelog, whose format is described in ATT&CK's Github.
This version of ATT&CK contains 910 Pieces of Software, 176 Groups, and 55 Campaigns.
Broken out by domain:
at Utility (v1.0)