Profile avatar
attack.mitre.org
MITRE ATT&CK® - A knowledge base for describing the behavior of adversaries. Replying/Following/Reposting ≠ endorsement.
87 posts 6,852 followers 16 following
Regular Contributor
Active Commenter
Posts 25 Comments 25

Today we're launching a new system where the public can help us develop the next ATT&CK release through Macrotechnique Refinement. To start refining FUZZYSNUGGLYDUCK, click here: attack.mitre.org/macro-techni.... Fabulous prizes await success.

submitted 7 hours ago • 2 comments

🚨It’s time to spotlight more headline-making adversary techniques. Today, a classic behavior seen in multiple global espionage operations: LSASS Credential Dumping attack.mitre.org/versions/v16...

submitted 7 days ago • 1 comment

Celebrate April 22nd with ATT&CK v17! The next version of ATT&CK is almost here, with new content related to the ESXi hypervisor, broad improvements to defenses, and updates to techniques, groups, and software across the framework.

submitted 28 days ago • 0 comments

Save the date: ATT&CKcon 6.0 is coming October 14 & 15, 2025 to MITRE's McLean, VA campus and virtually online! We'll post details on tickets and our CFP over the coming months, and at na.eventscloud.com/attackcon6.

submitted 55 days ago • 1 comment

Several members of the ATT&CK team are at the SANS #CTISummit today and tomorrow including ATT&CK Lead @whatshisface.bsky.social, Deputy Lead Amy Robertson, Enterprise Lead Casey Knerr, and Technique connoisseur @patrickhowelloneill.com. Come say hi, and maybe grab some stickers!

submitted 64 days ago • 0 comments

We've had ATT&CKcon 5.0 videos and slides out for a bit now, but our conference archive page is also up now organizing them in one place. Check out all of this year's content, including Lightning and Couch talks or any previous ATT&CKcon. attack.mitre.org/resources/at...

submitted 78 days ago • 0 comments

Multiple members of the ATT&CK team are headed for #shmoocon this weekend! Drop us a line if you’re looking for stickers or just want to say hi.

submitted 81 days ago • 1 comment

ATT&CKCon 5.0 videos and slides are up! Dig in to this year's presentations here: 📽️ www.youtube.com/playlist?lis... 📄 www.slideshare.net/MITREATTACK/...

submitted 109 days ago • 0 comments

A ton of folks are still using the old server and are going to be sad December 18th when it's shut down for good and their apps/scrips break. Moving to TAXII 2.1/STIX 2.1 is more than just a URL change, so the time to get started is yesterday. Please help us spread the word that the end is nigh.

submitted 132 days ago • 0 comments

We’re excited to introduce our new TAXII server and the latest addition to the ATT&CK Workbench software suite: the MITRE ATT&CK Workbench TAXII 2.1 Server: medium.com/mitre-attack...

submitted 132 days ago • 0 comments

A Happy Halloween from the MITRE ATT&CK team with a special treat: ATT&CK v16.0, including new spooky behaviors and ghoulish groups, as well as revisions and contributions, to satisfy your every #infosec need! Read the release blog here: medium.com/mitre-attack...

submitted 152 days ago • 0 comments

ATT&CKcon 5.0 is back up and running with day 2 keynote, CISA's Mark Singer. Mark's kicking off the day with some tales of CISA's view of threats. Join us for a packed day of ATT&CK insights at mitre.brandlive.com/ATTACKCon-5-0. #attackcon

submitted 160 days ago • 1 comment

Now Eli Schorr is here to present "Using ATT&CK and MITRE CTID’s StP Frameworks to Assess Threat Detection Resilience - A Guide to Evaluating Threat Detection Coverage."

submitted 160 days ago • 0 comments

Now Matt Berninger is here to present the "From ATT&CK to CL&IM: Cyber Insurance Data Modeling using MITRE ATT&CK and beyond."

submitted 161 days ago • 1 comment

Right now Joe Slowik @pylos.co is up on stage talking about his role leading CTI for ATT&CK!

submitted 161 days ago • 0 comments

ATT&CKcon 5.0 is back from lunch. Lex Crumpton, the defensive lead of MITRE ATT&CK, is up first to lead us off.

submitted 161 days ago • 1 comment

Coming up now: Brett Tolbert and Abdul Williams are here to present "This Baby Bird is Now a Peacock: The Evolution of Threat Actor Prioritization, Gap Analysis, and Detection Curation using ATT&CK."

submitted 161 days ago • 1 comment

Next up at ATT&CKcon, Nicole Hoffman and James Nutland are here to present:"Go Go Ransom Rangers: Diving into Akira’s Linux Variant with ATT&CK." They'll dive in to a history of Akira ransomware, the Linux ransomware landscape, and the latest Linux variants. Tune in.

submitted 161 days ago • 1 comment

Hop on and enjoy: www.mitre.org/events/attac...

submitted 161 days ago • 1 comment

MITRE ATT&CKCON5 is going live tomorrow! We're at capacity in person but virtual registration is still live and IT'S FREE. Check it out: www.mitre.org/events/attac...

submitted 162 days ago • 0 comments

We’re back to highlight more ATT&CK techniques making headlines. This week we look at APT41’s rise from the ashes — and, specifically, how they infiltrate and exfiltrate against a global array of targets.

submitted 216 days ago • 1 comment

In-person ticket sales for ATT&CKcon 5.0 are now live! Looking to join us in McLean, VA October 22-23? Tickets are $359. Virtual registration opens September 24th. na.eventscloud.com/website/76470/

submitted 250 days ago • 0 comments

The clock is running out on the ATT&CKcon 5.0 CFP. We'd love to feature your talk from our McLean, VA stage this October, but we need you to submit to openconf.org/attackcon202... before the clock strikes 6pm ET next Wednesday (6/26). Don't let time get away from you!

submitted 286 days ago • 0 comments

We've got news for you: ATT&CKcon 5.0, the MITRE ATT&CK Conference, returns Oct. 22-23 in-person in McLean, VA and live online. Our CFP is open now: www.openconf.org/attackcon202... Ticket sales will pop up later this summer. Interested in sponsoring? Drop us a line at [email protected].

submitted 302 days ago • 0 comments

you wouldn’t last an hour in the asylum where they raised us ATT&CK v15 is now streaming from your favorite TAXII servers or wherever STIX is served. Check out our post about our latest era at medium.com/mitre-attack... or visit the changelog at attack.mitre.org/resources/up...

submitted 343 days ago • 0 comments