Threat Management

Mitre releases latest version of its ATT&CK framework

(Antony-22, CC BY-SA 4.0, via Wikimedia Commons)

The not-for-profit Mitre Corporation announced Thursday the release of the latest version of its MITRE ATT&CK framework – a knowledge base of adversary tactics and techniques.

ATT&CK v10 includes updates to techniques, groups, and software across enterprise, mobile and industrial control systems (ICS). 

The biggest change, according to its release notes, was the addition of a new set of data source and data source component objects to compliment its data source name changes in the last version. The information is aggregated and structured as the new ATT&CK data source objects.

Mitre also updated data sources and refined techniques and assets to bring equity between ICS and enterprise. The new version includes cross-domain mappings of enterprise techniques to software that was previously only represented in its ICS matrix, including Stuxnet and Industroyer.

Visit Mitre’s blog for more information on the ATT&CK v10 release.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds