Center for Threat-Informed Defense

?? Last call: Asia-Pacific ATT&CK Community Workshop starts in 2hrs. ?? Virtual registration here ?? https://lnkd.in/ek28rTAZ

??Last chance for in-person registration?? Registration closes March 5th at 5pm SGT. Don't miss your chance to connect and learn with cyber defenders from across the region. ? Virtual registration is available through 12pm SGT on March 7th Agenda & Registration -> https://lnkd.in/ek28rTAZ

?? In-Person registration closes March 5th at 5pm SGT ?? There are a few more seats available for the 2025 Asia-Pacific ATT&CK Community Workshop on March 7th. Don't miss your chance to connect and learn with cyber defenders from across the region. ? Virtual registration is available through 12pm SGT on March 7th Agenda & Registration -> https://lnkd.in/ek28rTAZ

We are pleased to welcome SquareX as a Sponsor of the Asia-Pacific ATT&CK Community Workshop in Singapore on March 6 & 7, 2025. SquareX’s support as a Conference Sponsor is instrumental in advancing the MITRE ATT&CK framework across the Asia-Pacific region. Their support will enhance collaboration and knowledge sharing among cybersecurity professionals. Thank you, SquareX, for your commitment to expanding the ATT&CK community globally. We look forward to a successful event in Singapore! Learn more here: https://lnkd.in/ek28rTAZ #ATTACKCommunity #ThreatInformedDefense #Cybersecurity

?? Prioritize What Matters: Introducing the PKEV Project Not all vulnerabilities are created equal. In fact, less than 4% of all CVEs are exploited in real-world attacks. That’s why prioritization is key. The DHS CISA Known Exploited Vulnerabilities (KEV) Catalog created by Center for Threat-Informed Defense provides a crucial list of CVEs confirmed as actively exploited. But defenders need more than just a list—they need context. That’s where the Prioritize Known Exploited Vulnerabilities (PKEV) project comes in. Built in collaboration with AttackIQ, Citi, HCA Healthcare, JPMorganChase, and Microsoft, this project maps KEVs to adversary exploitation methods using MITRE ATT&CK?. With PKEV, defenders can: ? Focus resources on active, relevant threats ? Make threat-informed vulnerability management decisions ? Save time and money by prioritizing real-world risks ?? Explore the PKEV project here: https://lnkd.in/eiJZt2E7 ?? Read more: https://lnkd.in/eUhCCzTQ #ThreatInformedDefense #VulnerabilityManagement #KEV #MITREATTACK #CyberSecurity

Great to see CrowdStrike's blog announce details on their MITRE ATT&CK thought leadership work with Intel! This PC Security Stack Mappings project uncovered for the first time the direct applicability of HW enabled security SW features to real world attack tactics. CrowdStrike put together some nice graphics that outline how their two Intel enabled capabilities can help mitigate over 93 threat tactics. They also highlighted a real world customer case study where these features prevented an attack on a telco. Great technical analysis. I would like to personally thank Joel S.; Matthew Puckett; Adrian Liviu Arsene for investing resources into this project. Truly great new work for the industry that highlights the security capabilities on Intel vPro Security and Intel Core Ultra AI PCs! Blog: https://lnkd.in/gJrCx6rJ Customer Case Study https://lnkd.in/gyBRxVTn

? How do you use Center for Threat-Informed Defense R&D? Tell us how you use our R&D for a free pass to the 2025 Asia-Pacific ATT&CK Community Workshop. If you would like to join us in Singapore next week, repost or comment on this post and tell us what your favorite Center for Threat-Informed Defense R&D project is and why. We will follow up with you directly with a free registration code while they last. Learn about our R&D here: https://lnkd.in/euuaBG8F Learn about the event here: https://lnkd.in/ek28rTAZ ?#ThreatInformedDefense #Community #Cybersecurity #AsiaPacific #Collaboration #CyberDefense MITRE ATT&CK

?? Happy Three Year Anniversary, Nonprofit Cyber ?? The Center for Threat-Informed Defense is proud to be a member of Nonprofit Cyber. Together, we help defenders around the world understand and mitigate cyber threats.

?? Register now for the Asia-Pacific ATT&CK Community Workshop ?? The 2025 Asia-Pacific ATT&CK Community Workshop will unite regional security operations practitioners to advance a global understanding of threat-informed defense. ? The event is just two weeks away – March 7th ? In-person and virtual registration available ? Sponsorship opportunities available. This community-led event will convene ATT&CK users to advance a regional focus on ATT&CK and threat-informed defense. Don't miss this opportunity to learn as we cover topics including purple teaming, detection engineering, cyber threat intelligence analysis, risk management, changing the ransomware?paradigm, and all things MITRE ATT&CK Register here ?? https://lnkd.in/ek28rTAZ Sponsor information ?? https://lnkd.in/eq__SsZF #ThreatInformedDefense #community #Cybersecurity #AsiaPacific #Collaboration #CyberDefense MITRE MITRE Australia MITRE ATLAS #CTI #PurpleTeam #APAC

Understanding how adversaries use vulnerabilities to achieve their goals allows defenders to more effectively prioritize vulnerabilities and mitigate threats. By bringing the knowledge and practice of vulnerability management together with threat management, we gain context on vulnerabilities and create opportunities to leverage compensating controls to mitigate threats while managing the patch management workload. Learn how we use MITRE ATT&CK to describe the impact of vulnerabilities in the CISA KEV list: https://lnkd.in/eUhCCzTQ Thank you to our Research Sponsors for their support and collaboration in developing this latest project: AttackIQ, Citi, HCA Healthcare, JPMorganChase, and Microsoft #VulnerabilityManagement #ThreatInformedDefense #RiskManagement #CVE