🔍Accessible detections
🏭ICS Sub-Techniques
🦹Under-represented groups
🫡The sunset of TAXII 2.0
And a whole lot more. Today ATT&CK's published our 2024 roadmap! Check out some of what's coming the rest of this year at medium.com/mitre-attack/a….

I deeply honestly think we should consider hiring Swifties as threat intel analysts, because those girls’ eye for Easter eggs and patterns and hypotheses???! If we unleashed them on APTs / cybercrime ops, whole swathes of infrastructure would be TOAST in two days. 🤷‍♀️

Good evening
cc:nyxgeek

Are your users installing a little something extra on the side?

Next Wednesday, 4/24, at 2pm ET ATT&CK's Mac/Linux lead Cat is going to be joining defenders from Red Canary to talk about Installer Packages (T1546.016).

Join them live at redcanary.com/resources/webi…!

APT44 is an aggressive threat group sponsored by Russian Military Intelligence (GRU) Unit 74455. APT44 sits under the VIO, the Information Operation Troops. This is key: APT44 is a full-spectrum threat actor w/ operations driven by information confrontation objectives.

APT44 is incredibly brazen, amidst the most intense campaign of cyber activity ever seen, in full-blown support of a war of territorial aggression. And the threat posed does not end at Kyiv’s borders.

As other storms (Typhoons) emerge, it's critical we keep an eye on this one.

This tenure has involved a series of the most brazen cyber operations known to date - a series of firsts that have set precedents for future network attack activity and that continue to carry significant proliferation risk.

🔥 🔥 🔥

“Monitoring provides immediate security in a way that a vulnerability assessment can never provide, in a way that dropping a firewall into a network can never provide. Monitoring provides dynamic security in a way that a random product can never provide.”

A notable trend I've observed recently is companies including IOCs in their blogs, along with providing a link to a GitHub page containing the same data in a format that's more accessible to researchers (or machines). More of this please. 🥰

Yo! We’re hiring a Senior Manager for Malware Reverse Engineering!

jobs.smartrecruiters.com/PaloAltoNetwor…

The `A` in ATT&CK does NOT stand for adversary!!

Join Lx’C ॐ at BSidesCharm this Saturday at 1130am ET for a breakdown of the defender's perspective of what it really means to 'use' ATT&CK to detect & protect against threats #BSidesCharm 💙

We're hiring a Senior Product Manager at GreyNoise! This is a really cool opportunity. You'll be working with some of the most insane engineers and designers you've ever met, building and bringing to market the most insane tech you've ever seen.

boards.greenhouse.io/greynoiseintel…

data <————*—> vibes

you are here.

Do not underestimate the cleverness and determination of scammers, fraudsters, and bot farms.

We're excited to share our full speaker lineup for #SLEUTHCON 2024! 🎉

Visit sleuthcon.com/speakers for more reasons to get your tix!

Our friends over at Red Canary are hiring! Their Intel Analyst role is a full-time #synapse enterprise user!
jobs.lever.co/redcanary/bb7a…

...wait

Joe Słowik 🌻 Trigonometry!?!? Hold my beer lemme cosine this IP address