AttackIQ Blog

MITRE ATT&CK

    Breach and Attack Simulation, Cybersecurity, MITRE ATT&CK

    Defend as One: UK Cyber Security Strategy for Health and Adult Social Care to 2030

    April 26, 2023
    Read More
    Breach and Attack Simulation, Cybersecurity, MITRE ATT&CK, Strategy

    Looking Back at 2022: Adoption at Scale, Research, and Validated Industry Analysis 

    December 8, 2022
    A look back at how AttackIQ’s customers and advanced research, as well as key players in the analyst community, helped propel the breach and attack simulation market forward in 2022.
    Read More
    Adversary Emulation, MITRE ATT&CK, US-CERT Alert Response

    Attack Graph Response to US-CERT Alert (AA22-257A): Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Ransom Operations

    September 16, 2022
    AttackIQ has released a new attack graph emulating the techniques used by Iranian actors to compromise and encrypt systems — without the need for malware — to help customers defend against threats that try to operate while living solely off the land.
    Read More
    Blog Background
    Center for Threat-Informed Defense, Cybersecurity Education, MITRE ATT&CK, Threat-Informed Defense

    How to Test Your Defenses Against Personalized Top 10 MITRE ATT&CK Techniques

    August 4, 2022
    The Center for Threat-Informed Defense recently published a methodology and calculator so that you can identify the top MITRE ATT&CK techniques that impact your sector.
    Read More
    Adversary Emulation, Breach and Attack Simulation, MITRE ATT&CK

    Leveraging the MITRE ATT&CK framework to build a threat-informed defense

    July 29, 2022
    In this guest blog post, Bradley Schaufenbuel of Paychex writes about how security teams can leverage the MITRE ATT&CK framework to mount a “threat-informed” defense. This post originally appeared as an article in SC Magazine.
    Read More
    Adversary Emulation, MITRE ATT&CK, US-CERT Alert Response

    Response to US-CERT Alert (AA22-174A): Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon Systems 

    June 24, 2022
    In response to US-CERT Alert AA22-174A, AttackIQ has released new malware transfer scenarios to the platform and recommends validating security controls using previously released scenarios addressing Log4Shell and the VMware CVE-2022-22954 vulnerability.  
    Read More
    Adversary Emulation, MITRE ATT&CK, Ransomware

    Attack Graph Emulating the Conti Ransomware Team’s Behaviors

    June 15, 2022
    AttackIQ has released a new full-featured attack graph emulating the tactics, techniques, and procedures (TTPs) used by the Conti Ransomware Group. Despite the group’s recent dissolution, Conti’s successful post-compromise tactics, techniques, and procedures will live on. This attack graph will help defenders test their cyberdefense technologies against the full range of techniques and procedures that Conti used – and which Conti’s former members, now in other ransomware groups, will likely continue to use.
    Read More
    Adversary Emulation, Breach and Attack Simulation, MITRE ATT&CK, Security Control Validation, US-CERT Alert Response

    Attack Graph Response to US CERT AA22-152A: Karakurt Data Extortion Group 

    June 3, 2022
    AttackIQ has released a new fully featured attack graph emulating the tactics, techniques, and procedures used by the Karakurt Data Extortion Group recently reported in US-CERT Alert AA22-152. 
    Read More
    Blog Image for US Cert Alert AA22-152A
    MITRE ATT&CK, Ransomware, Threat-Informed Defense, TTPs

    Response to US-CERT Alert AA22-152A – Karakurt Data Extortion Group 

    June 2, 2022
    AttackIQ has released a new scenario and assessment in response to US-CERT Alert AA22-152A, Karakurt Data Extortion Group 
    Read More
    MITRE ATT&CK

    MITRE ATT&CK at Seven: The Seven Biggest Milestones

    May 31, 2022
    It’s been seven years since the MITRE ATT&CK framework was first published. Here, we look at some of the major milestones in its development and examine how the framework has become a game-changer for enterprise cybersecurity.
    Read More