Tag: data science

New MITRE report focuses on Log4Shell, endemic vulnerabilities in open-source libraries

New MITRE report focuses on Log4Shell, endemic vulnerabilities in open-source libraries

MITRE has released a report highlighting the issues open-source software libraries face in fixing vulnerabilities, following the handling of the Log4j vulnerabilities series last December. The exploitation led to many frantic weeks as cybersecurity researchers and defenders sought to stem…

threat modeling

MITRE releases playbook for threat modeling across medical device ecosystem

MITRE released guidance to the healthcare sector in the form of a playbook to increase knowledge of threat modeling throughout the medical device ecosystem. The organization said on Tuesday that it seeks to use the playbook to strengthen the cybersecurity…

federal cybersecurity

MITRE paper recommends how US Congress can improve federal cybersecurity

MITRE has released a technical paper on how the U.S. Congress can act to improve federal cybersecurity practices and meet advanced threats posed by China, Russia, ransomware gangs, and other nation-state and criminal actors. The eight recommendations in the paper…

ATT&CK v10

MITRE ATT&CK v10 comes with new techniques, groups, software for enterprises, ICS frameworks

Not-for-profit organization MITRE announced ATT&CK v10 with updates in techniques, groups, and software for the enterprises, mobile devices, and ICS (industrial control system) frameworks. The biggest change is the addition of a new set of data source and data component…

D3FEND framework

MITRE releases D3FEND framework as a complement to its existing ATT&CK structure

The National Security Agency (NSA) announced Tuesday that the MITRE project has released the D3FEND framework, funded by the agency. The new framework aims to improve the cybersecurity of national security systems, the Department of Defense, and the defense industrial…