$KIN $0.000001017 ▼ 5.93% Upgrades paid in KIN How to get KIN $KIN on X KIN Telegram

MITRE ATT&CK v20 Names Prompt Injection and AI-Enabled Exfiltration as Enterprise Attack Techniques — Securetron's AI-FW Answers with a Governance Layer for AI Agent Traffic

With ATT&CK now cataloging five AI-related techniques including T1698, T1699 and T1700, Securetron says the practical question for every enterprise is no longer whether AI agents can be attacked, but whether the traffic between those agents and the models they call is inspected, governed, and audited. Its AI-FW gateway does exactly that — and a free Community Edition offers 10 billion tokens per month.

FOR IMMEDIATE RELEASE

TORONTO, October 22, 2026 — Securetron today said that MITRE's ATT&CK v20 release — which adds five AI-related Enterprise attack techniques, including Direct Prompt Injection (T1699), Indirect Prompt Injection (T1698), and AI-Enabled Exfiltration (T1700) — marks the moment AI-agent attacks stop being hypothetical and become named, mapped, measurable gaps on every enterprise detection coverage map.

"ATT&CK doesn't tell you what to buy. It gives you a shared vocabulary," said Sarah Reid, Securetron spokesperson. "But that vocabulary now includes prompts hidden in web pages and documents that an AI system later reads, injected prompts that make an enterprise AI agent send data out through its own tool connections, and prompts embedded in malware to make LLM-assisted analysis fail. If your team maps detections to ATT&CK, v20 just put those techniques on your map as uncovered. The question to ask this week is the one the MITRE update itself raises: which AI agents can reach your data or your tools — and what is standing between them and the models they call?"

Securetron's answer is AI-FW, an AI firewall and governance gateway that sits between an enterprise's AI agents and the models they call. Every prompt and response is scanned in real time for jailbreaks, prompt injection, PII, toxicity, and data exfiltration — on every request, inbound and outbound. Semantic intent analysis scores requests against natural-language policies, while intelligent model routing directs each request to the right backend with per-model keys, failover, and weighted distribution.

"The v20 techniques all assume the same thing," Reid continued. "An agent that can act on what it reads. Indirect prompt injection assumes it can read. AI-enabled exfiltration assumes it can reach data and send it somewhere. If your agent traffic flows through a gateway that inspects every request before it leaves and every response before it lands, those techniques hit a wall instead of a tool."

AI-FW also closes the identity and audit gaps the new techniques expose. Agents authenticate with API keys, JWT, mTLS, or Kerberos; RBAC roles are enforced and SSO connects via OIDC and SCIM provisioning. Rolling risk scores track users, agents, and IPs with automatic blocking, and every transaction lands in a metadata-only audit log — full visibility for the security team without storing content. The gateway is fail-closed by design and retains zero content.

Enterprises deploying AI-FW also reduce operational drag. An exact and semantic completion cache cuts upstream calls and token bills, provider API keys stay server-side in the model registry instead of on endpoint agents, and semantic-gated prompt compression strips filler before forwarding — so governance doesn't slow teams down.

To give security teams a way to act on the new ATT&CK coverage, Securetron offers a free Community Edition of AI-FW: a proprietary, self-hosted package free to use with 10 billion tokens per month — not an open-source project — aimed at letting enterprises stand up an inspected, governed AI pipeline in minutes. AI-FW works with OpenAI-compatible and Anthropic clients, OpenAI SDKs, Claude Code, Cursor, MCP tools, or plain HTTP, with no agent-side changes required.

"ATT&CK v20 tells us attackers' AI techniques now have IDs," said Reid. "Defenders should respond the same way every other ATT&CK expansion has been answered: name the gap, map the coverage, and put a control in the path of the traffic. For AI agent traffic, that control is the gateway."

About Securetron: Securetron builds enterprise security infrastructure for the AI era. AI-FW is its AI firewall and governance gateway: prompt and response inspection, semantic guardrails, model routing, agent identity, and metadata-only audit for every AI agent and the models they call. For more information, visit https://aifw.io.

Press contact: Sarah Reid, Securetron, 1 Yonge St, Toronto, ON M5E 1E6, Canada, +1 (438) 927-8036, marketing@securetron.net. Website: https://aifw.io

Media Contact

Sarah Reid

Securetron

1 Yonge St, Toronto, ON

+1 (438) 927-8036

https://aifw.io

Topics: AI agents AI Security governance AI firewall AI-FW MITRE ATT&CK prompt injection Securetron
Share this press release:
Is this your press release? Sign in with your submission email to edit it

Have your own news to share? Submit Press Release Free