MITRE ATT&CK® - A knowledge base for describing the behavior of adversaries. Replying/Following/Re-tweeting ≠ endorsement. @ https://xitter.cf/t.co/wt46ArkZVt
McLean, VA
Joined May 2015
- Tweets2.8K
- Following514
- Followers12K
- Likes2.6K
Enterprise ATT&CK added Techniques for adversary use and abuse of AI, MFA bypass, and getting past CAPTCHAs, and Mobile brought back a Technique for delivering malicious apps outside official stores.
ICS ATT&CK also added Techniques for command and script execution & command and control, and ICS Detection Strategies now know which Assets they apply to. CTI added Iran-linked NIMBUS MANTICORE and its toolkit, plus updates to Salt Typhoon and APT38. attack.mitre.org/resources/u…
ATT&CK v20 is here! This release brings more coverage of attacks on critical infrastructure, with new Campaigns for the 2026 attacks on U.S. water utilities and an AI-assisted breach of Mexican government infrastructure that spanned IT and OT. medium.com/mitre-attack/atta…
If you register before 10/1 to attend in-person, you can submit a Lightning Talk for consideration. Keep an eye on your email for details after you register.
Excited to share our full ATT&CKcon 7.0 agenda. We cannot wait to welcome the ATT&CK community both in person and virtually on October 27.
Virtual tickets are now available. Check out our full set of talks and register today! na.eventscloud.com/website/9…
Virtual registration will launch in early October. For information on the location, and things like our hotel room block, check out our FAQ at na.eventscloud.com/website/9….
ATT&CKcon 7.0 in person ticket sales are open! Come join us 10/27-28 at ATT&CK HQ in McLean, VA. Catch two days of talks related to ATT&CK, network with the community, work with members of our team in person, and enjoy excellent snacks, meals, and drinks. na.eventscloud.com/website/9…
🤖 Made with AI
More interested in participating as an organization than as a speaker? We still have some slots open at na.eventscloud.com/website/9….
Today's the day. Tonight (7/2) at 8p ET we'll be shutting off submissions for ATT&CKcon 7.0. Historically 1/3 to 1/2 of submissions come in today, so you're not alone!
Have something cool you've been up to with ATT&CK? A rant about our last release? openconf.org/ATTACKcon2026/o…
🤖 Made with AI
It's the final countdown for the ATT&CKcon CFP
Friendly reminder that our CFP closes 7/2 at 8PM ET. If your entry is still 3 bullet points in Notes, or a fully formed concept you've been "letting marinate," this is your sign.
Hitting submit is underrated openconf.org/ATTACKcon2026/o…
🤖 Made with AI
On Cat World Domination Day, it feels only right to acknowledge the obvious (cats run everything). Even if you don't answer to a 🐈 overlord, a reminder that the ATT&CKcon 7.0 CFP closes 7/2 at 8pm ET. Take back a bit of control and submit before next Thu: openconf.org/ATTACKcon2026/o…
Every year, without fail, we get a handful of emails after the ATT&CKcon CFP deadline that say some variation of, "I was just about to submit..." Don't be that person.
CFP closes 7/2 at 8:00 PM EDT. No extensions, no secret back door, no "just one more."
openconf.org/ATTACKcon2026/
And last but not least, interested in getting in front of the ATT&CK community through conference sponsorship? Check out na.eventscloud.com/website/9…, we'd love to hear from you!
Looking to sit back and join us from the audience? Hang tight, in-person and virtual ticket sales will open over the coming months. Watch this space or na.eventscloud.com/website/9… for more details.
The ATT&CKcon 7.0 CFP is open! Want to join us on stage in McLean, VA, 10/28-29? We'd love to hear your best talk ideas with some relation to ATT&CK so we can bring to the wider ATT&CK community.
To submit to go openconf.org/ATTACKcon2026/ before 8pm ET on July 2nd.
ATT&CK v19 is live! We've split Defense Evasion into Stealth and Defense Impairment, introduced Sub-Techniques to ICS ATT&CK, Detection Strategies to Mobile, and added some AI and Social Engineering to Enterprise. Check out all the details in our blog post medium.com/mitre-attack/atta…
16/ Your turn 🎤👇
What technique deserves the perfect emoji translation? 😈🧠🧩
(Reply with: Technique name ➡️ emojis) 📝➡️😵💫
9/ Cloud Service Discovery
☁️🧑🔧💡
Remote Service Session Hijacking
🏠🧑💻🔧👾
Windows Management Instrumentation
🪟🗣️🎸