Y Meadows CISO explains cutting waste from a flat security budget
Leeser says inventory every tool's cost, map coverage to MITRE ATT&CK, and overlap replacements for 30 to 60 days.
Stories per day · 30 days
Relatedcisa3critical-infrastructure3incident-reporting3argumentation1aware-rg1circia1ciso1cps1cti1formal-concept-analysis1ics1identity1ot-security1resiliency1security-budget1security-stack1threat-intelligence1
15 stories, newest first · one card per story
Stories tagged #mitre-attack
CISA expands incident reporting form while CIRCIA rule waits
Only federal civilian agencies must report now; a final rule would add 72-hour incident and 24-hour ransom deadlines.
CISA launches an enhanced cyber incident reporting form
The questionnaire asks about malware, social engineering, hacking, and insider threats, and maps activity to MITRE ATT&CK.
ARBITRA maps full CTI reports to ATT&CK with expert argumentation
Specialized LLM experts propose entities from whole reports, then a quantitative argumentation check filters them against document evidence.
AWARE-RG: Abstraction Aware Explanation of Resiliency Graphs for Cyber Physical Systems
AWARE-RG explains role-bounded cyber-physical resiliency paths using ATT&CK for ICS and plan repair.
Threat detection dashboards are masking security coverage gaps
Conifers found 47% of deployed detections need fixes and about one-third of known threats lack coverage.
2
Using Threat Intelligence to Stop Ransomware Attacks
Recorded Future says threat intelligence can flag ransomware access and infrastructure before files are encrypted.
2
Cloud Threat Emulation on Autopilot: Context is Everything
Elastic outlines a plan-first cloud threat-emulation lifecycle so detections rest on realistic identity, telemetry, and cleanup.
UltraViolet Cyber Equinox measures detection coverage against MITRE frameworks
UltraViolet Cyber launches Equinox, an AI-automated platform mapping SIEM and EDR detection coverage against MITRE ATT&CK and ATLAS frameworks.
4
Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point
Filigran introduces Attack Chaining in OpenAEV to continuously simulate multi-stage attack paths, exposing gaps that isolated MITRE ATT&CK technique testing misses.
4
Mars Security brings threat intelligence to detection in real time
Mars Security launched Real-Time Intel-Based Detection, converting advisories from CISA and Mandiant into backtested MITRE ATT&CK-mapped detection rules for CrowdStrike, Wiz, and Splunk.
3
Mars Security Launches Real-Time Intel-to-Detection Engine That Turns Live Threat Intelligence Into Backtested Detections in Minutes
Mars Security launched Real-Time Intel-Based Detection, converting advisories into MITRE ATT&CK-mapped, backtested detection rules for CrowdStrike, Wiz, and Splunk within minutes.
3
numbat - AI agent observability, (Fri, Sep 4th)
SANS reviews Perplexity's open source numbat, a Go-based tool giving security teams observability, detection rules, and enforcement for AI agents like Claude and Gemini.
AI agents help compress ransomware intrusion to under 10 hours, raising stakes for CISOs
Unit 42 reports AI agents compressed a ransomware intrusion from weeks to under 10 hours, using 50+ MITRE ATT&CK techniques against an enterprise network.
2
An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation
Unit 42 investigated a ransom attack in which frontier AI agents autonomously breached an enterprise network, compressing weeks of tradecraft into under 10 hours.
2