Defend as One: UK Cyber Security Strategy for Health and Adult Social Care to 2030
The UK Department of Health & Social Care (DHSC) recently released their “…
Breach and Attack Simulation
MITRE ATT&CK
Breach and Attack Simulation
Looking Back at 2022: Adoption at Scale, Research, and Validated Industry Analysis
A look back at how AttackIQ's customers and advanced research, as well as key players in the analyst community, helped propel the breach and attack simulation market forward in 2022.
Adversary Emulation
Attack Graph Response to US-CERT Alert (AA22-257A): Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Ransom Operations
AttackIQ has released a new attack graph emulating the techniques used by Iranian actors to compromise and encrypt systems — without the need for malware — to help customers defend against threats that try to operate while living solely off the land.
Center for Threat-Informed Defense
How to Test Your Defenses Against Personalized Top 10 MITRE ATT&CK Techniques
The Center for Threat-Informed Defense recently published a methodology and calculator so that you can identify the top MITRE ATT&CK techniques that impact your sector.
Adversary Emulation
Leveraging the MITRE ATT&CK framework to build a threat-informed defense
In this guest blog post, Bradley Schaufenbuel of Paychex writes about how security teams can leverage the MITRE ATT&CK framework to mount a “threat-informed” defense. This post originally appeared as an article in SC Magazine.
Adversary Emulation
Response to US-CERT Alert (AA22-174A): Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon Systems
In response to US-CERT Alert AA22-174A, AttackIQ has released new malware transfer scenarios to the platform and recommends validating security controls using previously released scenarios addressing Log4Shell and the VMware CVE-2022-22954 vulnerability.
Adversary Emulation
Attack Graph Emulating the Conti Ransomware Team’s Behaviors
AttackIQ has released a new full-featured attack graph emulating the tactics, techniques, and procedures (TTPs) used by the Conti Ransomware Group. Despite the group's recent dissolution, Conti’s successful post-compromise tactics, techniques, and procedures will live on. This attack graph will help defenders test their cyberdefense technologies against the full range of techniques and procedures that Conti used – and which Conti’s former members, now in other ransomware groups, will likely continue to use.
Adversary Emulation
Attack Graph Response to US CERT AA22-152A: Karakurt Data Extortion Group
AttackIQ has released a new fully featured attack graph emulating the tactics, techniques, and procedures used by the Karakurt Data Extortion Group recently reported in US-CERT Alert AA22-152.
MITRE ATT&CK
Response to US-CERT Alert AA22-152A – Karakurt Data Extortion Group
AttackIQ has released a new scenario and assessment in response to US-CERT Alert AA22-152A, Karakurt Data Extortion Group
MITRE ATT&CK
MITRE ATT&CK at Seven: The Seven Biggest Milestones
It’s been seven years since the MITRE ATT&CK framework was first published. Here, we look at some of the major milestones in its development and examine how the framework has become a game-changer for enterprise cybersecurity.