iiinova — where your digital self keeps evolving

MITRE ATT&CK @attack.mitre.org · 26/05/2026

The ATT&CKcon 7.0 CFP is open! Want to join us on stage in McLean, VA, 10/28-29? We'd love to hear your best talk ideas with some relation to ATT&CK so we can bring to the wider ATT&CK community. To submit to go www.openconf.org/ATTACKcon2026/ before 8pm ET on July 2nd.

121

MITRE ATT&CK @attack.mitre.org · 28/04/2026

ATT&CK v19 is live! 🍾 We've split Defense Evasion into Stealth and Defense Impairment, introduced Sub-Techniques to ICS ATT&CK, Detection Strategies to Mobile, and added some AI and Social Engineering to Enterprise. Check out all the details in our blog post at medium.com/mitre-attack....

ATT&CK v19: The Defense Evasion Split, ICS Sub-Techniques, New AI & Social Engineering Coverage…

ATT&CK v19 is here, and this release has been a long time coming. The Defense Evasion split is finally in place, detection strategies are…

081

MITRE ATT&CK @attack.mitre.org · 01/04/2026

🚨 We’re thrilled to announce a new addition to ATT&CK… 🥁🥁🥁 ✨ EMOJIS ✨ 🤩🤠🥳😻🤘 😵‍💫 Techniques can be hard to describe 📝➡️🧠 Some folks are visual learners 👀📊 So… why not add a little 🔥🎨 fun? Example: attack.mitre.org/emoji-techni... 💡Drop your best technique ➡️ emoji translations in replies 🗣️👇

Emoji Technique | MITRE ATT&CK®

151

MITRE ATT&CK @attack.mitre.org · 30/03/2026

ATT&CK v19 is coming 4/28! Along with our usual updates, the big change this release is the replacement of the Defense Evasion tactic in Enterprise ATT&CK with new Stealth and Impair Defenses tactics. Cat Self talked about what's changing back at ATT&CKcon 6.0 (www.youtube.com/watch?v=0rQQ...).

160

MITRE ATT&CK @attack.mitre.org · 09/03/2026

Pencil in Oct 27-28, 2026 for ATT&CKcon 7.0! We'll be live for both in-person in McLean, VA and live online. Drop us a line at attackcon@mitre.org if you're interested in sponsoring, watch for our CFP to open in May, and grab a ticket when they go on sale this summer. See you in October!

022

MITRE ATT&CK @attack.mitre.org · 11/12/2025

An exciting role of the ATT&CK team is getting to engage with the community. As today's kids are increasingly plugged into technologies, cybersecurity education for them is increasingly important too--and our leadership has been doing just that. www.mitre.org/news-insight...

mitre.org

Introducing Cybersecurity to the Most Connected Generation | MITRE

MITRE’s cyber experts present the ATT&CK® framework to young people as an entrée into cybersecurity.

061

MITRE ATT&CK @attack.mitre.org · 07/11/2025

It was recorded, and slides are now being shared.... Slides and videos from ATT&CKcon 6.0 are now posted in an easy to find way. Check out attack.mitre.org/resources/at... to check out our great talks (and Couch Talks) from October, or even check out past ATT&CKcons from that same page.

MITRE ATT&CKcon - ATT&CKcon 6.0 | MITRE ATT&CK®

075

MITRE ATT&CK @attack.mitre.org · 28/10/2025

ATT&CK v18 is now out! Today marks the release of Detection Strategies, where we've moved from single-sentence notes to structured, behavior-focused strategies across the board. A new blog post describes the changes medium.com/mitre-attack... with details at attack.mitre.org/resources/up....

ATT&CK v18: Detection Strategies, More Adversary Insights,

ATT&CK v18 is released with new Detection Strategies, Analytics, and revamped Data Components!

095

MITRE ATT&CK @attack.mitre.org · 23/10/2025

🚨Big changes coming to ATT&CK on Tue (10/28) as we improve detections! It you use x_mitre_detection or x_mitre_data_sources, you need to update. @lexonthehunt.bsky.social covers the changes at: 🖥️ mitre.app.box.com/s/3lynwg8ebc... 📽️ mitre.brandlive.com/MITRE-ATTACK... 📖 medium.com/p/7e6738fec31f

media.tenor.com

a man in a hooded jacket says " i am once again asking for your attention "

ALT: a man in a hooded jacket says " i am once again asking for your attention "

132

MITRE ATT&CK @attack.mitre.org · 03/09/2025

Virtual registration for ATT&CKcon 6.0 is open! We hope you'll chose to join us in person at ATT&CK's home in McLean, VA October 14-15... But if you can't, catch the action for free online by registering at na.eventscloud.com/attackcon6/. Catch all of our talks & some exclusive online only content.

030

MITRE ATT&CK @attack.mitre.org · 26/08/2025

The ATT&CKcon 6.0 talk lineup is now live! Check out our fabulous group of speakers, or pick up a ticket to join us October 14-15 in McLean, VA at na.eventscloud.com/attackcon6. Only able to join us virtually? Hang tight, virtual registration opens September 3rd.

031

MITRE ATT&CK @attack.mitre.org · 19/08/2025

Are you ready to celebrate National Chocolate Day this October 28th? We will be by releasing ATT&CK v18, our next version of MITRE ATT&CK! We'll be releasing our usual updates to Techniques and Groups, but check out some big defensive changes on the way in this release (medium.com/mitre-attack...).

MITRE ATT&CK @attack.mitre.org · 05/08/2025

The ATT&CK team is out at #hackersummercamp and happy to chat, meet up, or just share some stickers. Drop a DM or stop by an appearance if you’re interested in saying hi!

021

MITRE ATT&CK @attack.mitre.org · 30/07/2025

In-person ATT&CKcon 6.0 ticket sales are open! Come join us October 14-15 at ATT&CK HQ in McLean, VA. na.eventscloud.com/attackcon6/ We're almost set to announce this year's exciting speaker lineup and will open virtual registration Sep 3rd, so stay tuned!

na.eventscloud.com

ATT&CKcon 6.0

MITRE ATT&CKcon | October 14 - 15, 2025

033

MITRE ATT&CK @attack.mitre.org · 09/07/2025

Tonight's the night! The ATT&CKcon 6.0 CFP will automatically stop accepting submissions at 8pm ET tonight. Historically we get about half of our submissions today, so all you procrastinators are in good company. Give it your best shot at openconf.org/ATTACKCON2025.

media.tenor.com

a man in a black shirt and tie is holding a pen and a notebook and says you 're on my list

ALT: a man in a black shirt and tie is holding a pen and a notebook and says you 're on my list

021

MITRE ATT&CK @attack.mitre.org · 07/07/2025

We are excited to announce our ATT&CKcon 6.0 keynote, Lillian Teng! Lillian's worn numerous hats in cyber at NCIS, FBI, Yahoo, and Capital One and has served with the KC7 Foundation, GirlSecurity, and LEAP. Want to also join us on stage? CFP closes Wed night! www.openconf.org/ATTACKCON2025.

160

MITRE ATT&CK @attack.mitre.org · 03/06/2025

The MITRE ATT&CKcon 6.0 CFP is now open! Are you interested in joining us on the ATT&CKcon stage in McLean, VA October 14-15, 2025? Pitch us on your best ATT&CK related talk! Our CFP will close on July 9th at 8pm ET sharp, so get those proposals started. www.openconf.org/ATTACKCON202...

142

MITRE ATT&CK @attack.mitre.org · 08/05/2025

An old idea that still holds true: Fight the enemy where they aren’t. Threat actors take this advice to heart by avoiding Endpoint Detection and Response solutions and targeting systems that do not generally support EDR such as VMware ESXi hosts.

191

MITRE ATT&CK @attack.mitre.org · 30/04/2025

🎣 Get in loser, we’re going phishing. This week, we’re going to spotlight how Russian threat actors are phishing targets associated with Ukraine and human rights to abuse Microsoft OAuth.

1103

MITRE ATT&CK @attack.mitre.org · 24/04/2025

What happens when an adversary successfully compromises a target and then “closes the door” behind them? They gain Exclusive Control, a new technique for ATT&CK v17. Let’s take a closer look: attack.mitre.org/techniques/T...

Exclusive Control, Technique T1668 - Enterprise | MITRE ATT&CK®

151

MITRE ATT&CK @attack.mitre.org · 22/04/2025

ATT&CK v17 is now live! This release includes the first version of the ESXi platform, a pile of defensive upgrades, and fresh content across Enterprise, Mobile, and ICS. Check out our blog post describing the changes by Amy Robertson & @whatshisface.bsky.social at medium.com/mitre-attack....

ATT&CK v17: New Platform (ESXi), Collection Optimization, & More Countermeasures

By: Amy Robertson and Adam Pennington

061

MITRE ATT&CK @attack.mitre.org · 15/04/2025

🤖 It’s time to look at how adversaries are using ChatGPT to pursue information related to cyber intrusion tools and operations

140

MITRE ATT&CK @attack.mitre.org · 10/04/2025

🔦 Let’s look closely at an adversary technique grabbing headlines: Medusa ransomware actors are using vulnerable or signed drivers to kill endpoint detection and response tools.

183

MITRE ATT&CK @attack.mitre.org · 02/04/2025

🚪🗝️ Let’s sneak in through the backdoor to peek at more adversary techniques. Today, we focus on T1059.001: Command-Line Interface: PowerShell, which is being used by a notable APT group to deploy their -- you guessed it -- signature backdoor.

152

MITRE ATT&CK @attack.mitre.org · 01/04/2025

Today we're launching a new system where the public can help us develop the next ATT&CK release through Macrotechnique Refinement. To start refining FUZZYSNUGGLYDUCK, click here: attack.mitre.org/macro-techni.... Fabulous prizes await success.

An ampersand eating a waffle. As one does.

2135

MITRE ATT&CK @attack.mitre.org · 25/03/2025

🚨It’s time to spotlight more headline-making adversary techniques. Today, a classic behavior seen in multiple global espionage operations: LSASS Credential Dumping attack.mitre.org/versions/v16...

OS Credential Dumping: LSASS Memory, Sub-technique T1003.001 - Enterprise | MITRE ATT&CK®

173

MITRE ATT&CK @attack.mitre.org · 04/03/2025

Celebrate April 22nd with ATT&CK v17! The next version of ATT&CK is almost here, with new content related to the ESXi hypervisor, broad improvements to defenses, and updates to techniques, groups, and software across the framework.

086

MITRE ATT&CK @attack.mitre.org · 05/02/2025

Save the date: ATT&CKcon 6.0 is coming October 14 & 15, 2025 to MITRE's McLean, VA campus and virtually online! We'll post details on tickets and our CFP over the coming months, and at na.eventscloud.com/attackcon6.

na.eventscloud.com

ATT&CKcon 6.0

MITRE ATT&CKcon | October 14 - 15, 2025

160

MITRE ATT&CK @attack.mitre.org · 27/01/2025

Several members of the ATT&CK team are at the SANS #CTISummit today and tomorrow including ATT&CK Lead @whatshisface.bsky.social, Deputy Lead Amy Robertson, Enterprise Lead Casey Knerr, and Technique connoisseur @patrickhowelloneill.com. Come say hi, and maybe grab some stickers!

0121

MITRE ATT&CK @attack.mitre.org · 13/01/2025

We've had ATT&CKcon 5.0 videos and slides out for a bit now, but our conference archive page is also up now organizing them in one place. Check out all of this year's content, including Lightning and Couch talks or any previous ATT&CKcon. attack.mitre.org/resources/at...

MITRE ATT&CKcon - ATT&CKcon 5.0 | MITRE ATT&CK®

0124

MITRE ATT&CK @attack.mitre.org · 09/01/2025

Multiple members of the ATT&CK team are headed for #shmoocon this weekend! Drop us a line if you’re looking for stickers or just want to say hi.

1130

MITRE ATT&CK @attack.mitre.org · 13/12/2024

ATT&CKCon 5.0 videos and slides are up! Dig in to this year's presentations here: 📽️ www.youtube.com/playlist?lis... 📄 www.slideshare.net/MITREATTACK/...

youtube.com

ATT&CKcon 5.0 - YouTube

051

Reposted by MITRE ATT&CK

Adam Pennington @whatshisface.bsky.social · 20/11/2024

A ton of folks are still using the old server and are going to be sad December 18th when it's shut down for good and their apps/scrips break. Moving to TAXII 2.1/STIX 2.1 is more than just a URL change, so the time to get started is yesterday. Please help us spread the word that the end is nigh.

01610

MITRE ATT&CK @attack.mitre.org · 20/11/2024

We’re excited to introduce our new TAXII server and the latest addition to the ATT&CK Workbench software suite: the MITRE ATT&CK Workbench TAXII 2.1 Server: medium.com/mitre-attack...

Introducing TAXII 2.1 and a fond farewell to the TAXII 2.0 Server

We’re excited to introduce our new TAXII 2.1 server and the latest addition to the ATT&CK Workbench Software Suite

0147

MITRE ATT&CK @attack.mitre.org · 31/10/2024

A Happy Halloween from the MITRE ATT&CK team with a special treat: ATT&CK v16.0, including new spooky behaviors and ghoulish groups, as well as revisions and contributions, to satisfy your every #infosec need! Read the release blog here: medium.com/mitre-attack...

v16 Cloud Rebalancing, Analytics,

Fine-tuned cloud coverage, optimized defense with more analytics, expanded existing techniques/groups, and introduced new behaviors &…

031

MITRE ATT&CK @attack.mitre.org · 23/10/2024

ATT&CKcon 5.0 is back up and running with day 2 keynote, CISA's Mark Singer. Mark's kicking off the day with some tales of CISA's view of threats. Join us for a packed day of ATT&CK insights at mitre.brandlive.com/ATTACKCon-5-0. #attackcon

162

Now Eli Schorr is here to present "Using ATT&CK and MITRE CTID’s StP Frameworks to Assess Threat Detection Resilience - A Guide to Evaluating Threat Detection Coverage."

010

Now Matt Berninger is here to present the "From ATT&CK to CL&IM: Cyber Insurance Data Modeling using MITRE ATT&CK and beyond."

Right now Joe Slowik @pylos.co is up on stage talking about his role leading CTI for ATT&CK!

020

ATT&CKcon 5.0 is back from lunch. Lex Crumpton, the defensive lead of MITRE ATT&CK, is up first to lead us off.

120

Coming up now: Brett Tolbert and Abdul Williams are here to present "This Baby Bird is Now a Peacock: The Evolution of Threat Actor Prioritization, Gap Analysis, and Detection Curation using ATT&CK."

140

Next up at ATT&CKcon, Nicole Hoffman and James Nutland are here to present:"Go Go Ransom Rangers: Diving into Akira’s Linux Variant with ATT&CK." They'll dive in to a history of Akira ransomware, the Linux ransomware landscape, and the latest Linux variants. Tune in.