Content v2026.08
This version of ATLAS data contains 1 matrix, 16 tactics, 114 techniques, 83 sub-techniques, 39 mitigations, and 72 case studies.
ATLAS is a globally accessible, living knowledge base of adversary tactics and techniques involving AI, including attacks against AI-enabled systems, abuse or manipulation of AI capabilities, and harmful autonomous behavior materially enabled by AI. ATLAS is based on empirical evidence from observations of real-world attacks as well as realistic demonstrations from AI red teams and security groups.
Matrices
-
Updated existing matrices
Tactics
-
Updated existing tactics
- AI Attack Adaptation
- Previously "AI Attack Staging"
- AI Attack Adaptation
Techniques
-
Added new techniques
- Autonomous Reconnaissance
- Autonomous Attack-Path Adaptation
- Autonomous AI Agent Communication
- Autonomous AI Agent Communication: Communication via Shared Artifacts
- Autonomous AI Agent Communication: Direct Agent Communication
- Exploit Automated Artifact Processing Pipeline
- AI Artifact Repository
- AI Agent Environment Reconstruction
- Exploitation of Remote Services
- Obfuscated Files or Information
- Autonomous Attack Orchestration
- Create Account
- Automated Collection
- Data Staged
- Compromise Infrastructure
- Develop Capabilities: Autonomous Exploit Development
- Develop Capabilities: AI Agent Tools
- Obtain Capabilities: AI Agent Tools
-
Updated existing techniques
- Enterprise Resource Discovery
- Generalized from "Cloud Service Discoery"
- Enterprise Environment Discovery
- Generalized from "Process Discovery"
- Cyber Communication Channel
- Generalized from "Reverse Shell"
- Develop Capabilities
- LLM Prompt Crafting
- Retrieval Content Crafting
- Enterprise Resource Discovery
Mitigations
-
Added new mitigations
-
Updated existing mitigations