Collaborate Disseminate
A report published last year has noted that most attacks against artificial intelligence (AI) systems are focused on manipulating them (e.g., influencing recommendation systems to favor specific content), but that new attacks using machine learning (ML… Continue reading A new threat matrix outlines attacks against machine learning systems
Larry Cashdollar, senior security response engineer at Akamai, talks about the craziest stories he’s faced, reporting CVEs since 1994. Continue reading 305 CVEs and Counting: Bug-Hunting Stories From a Security Engineer
Seasoned cybersecurity pros will be familiar with MITRE. Known for its MITRE ATT&CK framework, MITRE helps develop threat models and defensive methodologies for both the private and public sector cybersecurity communities. MITRE recently added to … Continue reading MITRE Shield shows why deception is security’s next big thing
As ransomware continues to prove how devastating it can be, one of the scariest things for security pros is how quickly it can paralyze an organization. Just look at Honda, which was forced to shut down all global operations in June, and Garmin, which … Continue reading Your best defense against ransomware: Find the early warning signs
Could you please help me in finding a repository for MITRE ATT&CK ICS? I was wondering if the matrix, along with labels, assets and tactics was available smewhere online, perhaps in a STIX format as they did for ATT&CK Mobile, Ente… Continue reading MITRE ATT&CK ICS Machine readable
There is a OVAL Queries option in nvd vulnerability database search form, but I can’t find out how to use it.
Do anyone know?
Continue reading How to use OVAL to query nvd.nist.gov vulnerability databse [closed]
Guardicore unveiled new capabilities for Infection Monkey, its free, open source breach and attack simulation (BAS) tool that maps to the MITRE ATT&CK knowledge base and tests network adherence to the Forrester Zero Trust framework. Infection Monk… Continue reading Open source tool Infection Monkey allows security pros to test their network like never before
Qualys today announced Qualys Multi-Vector EDR. Taking a new multi-vector approach to Endpoint Detection and Response (EDR), Qualys now brings the unifying power of its highly scalable cloud platform to EDR. Traditional EDR solutions singularly focus o… Continue reading Qualys unveils Multi-Vector EDR, a new approach to endpoint detection and response
McAfee introduced MITRE ATT&CK into McAfee MVISION Cloud, the company’s Cloud Access Security Broker (CASB), delivering a precise method to hunt, detect and stop cyberattacks on cloud services. Empowering SecOps teams This new integration gives Se… Continue reading McAfee MVISION Cloud now maps threats to MITRE ATT&CK
Cybercrime reporter Thomas Brewster has written a fascinating exposé of the activities of Mitre Corporation, which has taken on some eyebrow-raising projects for the US government.
Continue reading Mitre, the creepy company checking your fingerprints on Facebook for the US Government