Daily OT Security News: October 19, 2026

This edition covers five source-verified OT, IoT and critical-infrastructure cybersecurity developments. Source publication dates are identified below; these items did not all break today. Confirmed incidents, potential vulnerabilities, unverified claims and framework guidance are distinguished throughout. 1. MITRE ATT&CK v20 sharpens ICS threat mapping Source dates: MITRE release: October 13, 2026; Industrial Cyber coverage: October 16, 2026. Historical campaign sources: July 30 and May 6, 2026. MITRE’s October 13 ATT&CK v20 release broadens coverage across Enterprise, Mobile and industrial control systems (ICS). For OT defenders, the update adds ICS Command and Scripting Interpreter (T1701) with six interpreter sub-techniques, plus DNS and publish/subscribe command-and-control sub-techniques. It adds critical-infrastructure campaigns and gives ICS Detection Strategies platform and asset context. MITRE says the release includes nine new ICS Detection Strategies and 22 new ICS Analytics designed to distinguish suspicious activity from routine engineering and…