article thumbnail

MITRE presents ATT&CK for ICS, a knowledge base for ICS

Security Affairs

MITRE announced the initial release of a version of its MITRE ATT&CK knowledge base that focuses on industrial control systems (ICS). Now the organization is going to propose a knowledge base that focused on ICS systems for its MITRE’s ATT&CK. ” reads the official page set up by MITRE.

article thumbnail

Episode 245: How AI is remaking knowledge-based authentication

The Security Ledger

We talk with Matt Salisbury of Honeybadger HQ, which is using AI and machine learning to re-imagine knowledge-based authentication. The post Episode 245: How AI is remaking knowledge-based authentication appeared first on The Security. AI juices knowledge-based authentication. Read the whole entry. »

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

US CISA published a guide to better use the MITRE ATT&CK framework

Security Affairs

In 2018, MITRE announced the MITRE ATT&CK , a globally accessible knowledge base of adversary tactics and techniques based on real-world observations. Cybersecurity and Infrastructure Security Agency (CISA) this week released a new guide for cyber threat intelligence experts on the use of the MITRE ATT&CK framework.

article thumbnail

MITRE adds D3FEND defensive cybersecurity techniques to ATT&CK Framework

Security Affairs

“D3FEND is a knowledge base, but more specifically a knowledge graph, of cybersecurity countermeasure techniques. “MITRE released D3FEND as a complement to its existing ATT&CK framework, a free, globally-accessible knowledge base of cyber adversary tactics and techniques based on real-world observations.

article thumbnail

MITRE released EMB3D Threat Model for embedded devices

Security Affairs

The threat model provides a knowledge base of cyber threats to embedded devices. MITRE announced the public release of its EMB3D threat model for embedded devices used in various industries (i.e. Automotive, healthcare, and manufacturing), including critical infrastructure.

article thumbnail

Team Liquid’s wiki leak exposes 118K users

Security Affairs

Users of the e-sports knowledge base were exposed via a publicly accessible and passwordless MongoDB database, the Cybernews research team has discovered. Liquipedia, an online e-sports platform run by Team Liquid, exposed a database revealing its users’ email addresses and other details.

article thumbnail

Ivanti warns of a new actively exploited zero-day

Security Affairs

Ivanti will update this knowledge base article as more information becomes available.” Ivanti expects the threat actor to change their behavior and we expect a sharp increase in exploitation once this information is public – similar to what we observed on 11 January following the 10 January disclosure.” 20240126.5.xml”