Fraud & Identity Theft
The document provides a behavior-based model of the tactics and techniques employed by fraudsters.
Hi, what are you looking for?
SecurityWeek
All posts tagged "MITRE"
ICS/OT
The Embedded Systems Threat Matrix (ESTM) aims to help organizations protect critical embedded systems.
Application Security
XSS remains the top software weakness, followed by SQL injection and CSRF. Buffer overflow issues and improper access control make it to top 25.
Cloud Security
Eleven companies took part in the evaluations and several have boasted 100% detection and coverage rates.
Risk Management
MITRE has unveiled the latest version of ATT&CK, with the most significant changes in the defensive part of the framework.
Vulnerabilities
MITRE has updated the list of Most Important Hardware Weaknesses to align it with evolving hardware security challenges.
Risk Management
The MITRE AADAPT framework provides documentation for identifying, investigating, and responding to weaknesses in digital asset payments.
Malware & Threats
Windows versions of the BrickStorm backdoor that the Chinese APT used in the MITRE hack last year have been active for years.
Government
The US government's cybersecurity agency CISA has “executed the option period on the contract” to keep the vulnerability catalog operational.
Government
MITRE warns of a deterioration of national vulnerability databases and advisories, slowed vendor reaction and limited response operations.
Vulnerabilities
MITRE has released an updated CWE Top 25 Most Dangerous Software Weaknesses list, with cross-site scripting (XSS) at the top.
Artificial Intelligence
MITRE’s AI Incident Sharing initiative helps organizations receive and hand out data on real-world AI incidents.
ICS/OT
MITRE has expanded the EMB3D Threat Model with essential mitigations to help organizations address threats to embedded devices.
Incident Response
MITRE has shared information on how China-linked hackers abused VMware for persistence and detection evasion in the recent hack.
IoT Security
MITRE announced the public availability of the EMB3D threat model for embedded devices used in critical infrastructure.
Nation-State
MITRE has shared more details on the recent hack, including the new malware involved in the attack and a timeline of the attacker’s activities.
Nation-State
MITRE R&D network hacked in early January by a state-sponsored threat group that exploited an Ivanti zero-day vulnerability.
Vulnerabilities
MITRE is unable to compile a list of all new vulnerabilities, and NIST is unable to subsequently, and consequently, provide an enriched database of...
Malware & Threats
A malware tactic dubbed ‘hunter-killer’ is growing, based on an analysis of more than 600,000 malware samples. This may become the standard approach for...
ICS/OT
MITRE and partners unveil EMB3D, a new threat model designed for critical infrastructure embedded devices.
Data Breaches
The physical security firm says its alarm monitoring and system functionality have not been affected.
Artificial Intelligence
Artificial Intelligence
Identity & Access
Artificial Intelligence
Many companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.
Fraud & Identity Theft
Cybersecurity Funding
