The Xposed Newsletter #5

Happy New Year!

Welcome to the first Xposed newsletter of 2025. As ever, we’ve got loads of news, reviews, and insight from our experts to help you navigate the tricky world of cyber security. So, let’s get stuck in.

MITRE 2024

One of the industry’s main independent evaluations, MITRE ATT&CK Evaluations for Enterprise, was published in December.

But what is it, how should it be interpreted, and why does it matter to mid-sized companies? We explain all.

What is MITRE and why should I care?

MITRE’s 2024 Enterprise round of testing represents a new era of EDR product evaluation. As a result, smaller IT teams are now able to find useful and tangible insights to help them make informed decisions.

MITRE is a not-for-profit organization that supports R&D across both the private and public sectors. They maintain a number of standards and frameworks which companies use to assess their Endpoint and Cloud Detection and Response solutions. Chief among them is the well-known MITRE ATT&CK Matrix, which is a useful framework to both express attacks and the ways to detect them.

“They also produce tooling with which you can create ‘heat maps’ for both your attack simulations and your controls against these attacks – that goes for real attacks, pen tests, etc. In this sense, they also enable informed cyber-defense and sharing across organizations,” believes Jorge Lamarca, Senior Manager, Threat Detection at WithSecure.

Read the rest of the article and find out much more here:

The Xposed Podcast - November 2024

“Keyboards and mice are used in a vast percentage of all cyber security attacks and thus should be banned.”

The latest Xposed podcast episode is now live!

Join Tim and Steve as they discuss:

·????? Microsoft

·????? Typo squatting

·????? AI fuzzing

·????? Hacktivism

·????? DDoS

·????? Attacks on healthcare

·????? And, randomly, Tottenham Hotspur!

?This podcast is brought to you in association with BSL IT , a proud WithSecure partner.

Predictions 2025

We’re sick of predictions, aren’t you? Mikko and Paolo recently sat down to discuss the worst predictions they’ve ever heard and offer absolutely no predictions for the upcoming year.

Thanks for 2024!

A quick note to finish, as we want to say thank you for engaging with our newsletter. We launched it in 2024 to try and offer impartial and helpful content from our experts to you.

We’ve been delighted with the response and look forward to continuing in 2025!