[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:mitre-attack\u002Foverview":3},{"item":4,"lessons":16,"controls":67,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"mitre-attack","overview","ATT&CK","MITRE ATT&CK",117,"MITRE","**What it is.** MITRE ATT&CK is a freely available knowledge base of adversary tactics and techniques based on real-world observations. Tactics describe the attacker's goal at a stage, such as Initial Access or Exfiltration, and techniques describe how they achieve it. Separate matrices cover Enterprise, Mobile and ICS environments.\n\n**How to use it.** Defenders use ATT&CK as a common language to map threat intelligence, assess detection coverage, plan red and purple team exercises, and prioritise controls against the techniques most used by relevant threat groups. Mapping logs and detections to techniques shows where visibility is missing.\n\n**Common pitfalls.** Treating the matrix as a checklist to colour in leads to shallow coverage claims; one detection rarely covers every variant of a technique. Prioritise by relevance to your threats, test detections in practice and remember that ATT&CK describes behaviour, not severity or likelihood.",null,"https:\u002F\u002Fattack.mitre.org\u002F","Open MITRE ATT&CK","2026-10-18T15:18:43.663+00:00",{"total":17,"list":18},98,[19,23,27,31,35,39,43,47,51,55,59,63],{"slug":20,"title":21,"published_at":22},"ai-agents-can-compromise-ot-systems-and-move-physical-equipment-in-under-17-minutes","AI Agents Can Compromise OT Systems and Move Physical Equipment in Under 17 Minutes","2026-10-14T18:21:46.77+00:00",{"slug":24,"title":25,"published_at":26},"mssps-must-shift-left-proactive-threat-hunting-is-the-new-ransomware-defense","MSSPs Must Shift Left: Proactive Threat Hunting Is the New Ransomware Defense","2026-10-13T12:20:17.419+00:00",{"slug":28,"title":29,"published_at":30},"state-sponsored-hacking-tools-seized-in-flax-typhoon-disruption-operation","State-Sponsored Hacking Tools Seized in Flax Typhoon Disruption Operation","2026-10-08T22:21:56.481+00:00",{"slug":32,"title":33,"published_at":34},"shinyhunters-suspect-detained-cooperating-with-fbi-to-expose-group","ShinyHunters Suspect Detained, Cooperating with FBI to Expose Group","2026-10-04T08:20:17.276+00:00",{"slug":36,"title":37,"published_at":38},"ai-gives-attackers-the-edge-defenders-must-accelerate-to-keep-pace","AI Gives Attackers the Edge: Defenders Must Accelerate to Keep Pace","2026-10-01T20:20:47.704+00:00",{"slug":40,"title":41,"published_at":42},"zero-trust-remains-effective-against-ai-attacks-when-properly-implemented","Zero Trust Remains Effective Against AI Attacks — When Properly Implemented","2026-10-01T18:20:20.176+00:00",{"slug":44,"title":45,"published_at":46},"killsec-ransomware-gang-dismantled-500-attacks-attributed-to-teen-led-operation","KillSec Ransomware Gang Dismantled: 500+ Attacks Attributed to Teen-Led Operation","2026-10-01T16:21:25.087+00:00",{"slug":48,"title":49,"published_at":50},"needymantis-malware-enables-persistent-nation-state-access-across-critical-sectors","NeedyMantis Malware Enables Persistent Nation-State Access Across Critical Sectors","2026-09-29T16:21:02.533+00:00",{"slug":52,"title":53,"published_at":54},"shinyhunters-suspect-arrested-lessons-in-attribution-and-threat-actor-tracking","ShinyHunters Suspect Arrested: Lessons in Attribution and Threat Actor Tracking","2026-09-28T20:20:18.941+00:00",{"slug":56,"title":57,"published_at":58},"ai-accelerated-attacks-outpace-fragmented-soc-defenses","AI-Accelerated Attacks Outpace Fragmented SOC Defenses","2026-09-25T14:21:36.552+00:00",{"slug":60,"title":61,"published_at":62},"north-korean-hackers-exploit-backend-compromise-to-drain-3516m-from-bitget","North Korean Hackers Exploit Backend Compromise to Drain $351.6M from Bitget","2026-09-25T12:21:08.081+00:00",{"slug":64,"title":65,"published_at":66},"bitget-loses-3516m-in-lazarus-group-linked-crypto-hack","Bitget Loses $351.6M in Lazarus Group-Linked Crypto Hack","2026-09-25T02:20:26.146+00:00",[68,73,78,83,87,92],{"slug":69,"name":70,"problem":71,"stories":72},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",42,{"slug":74,"name":75,"problem":76,"stories":77},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",21,{"slug":79,"name":80,"problem":81,"stories":82},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",16,{"slug":84,"name":85,"problem":86,"stories":82},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":88,"name":89,"problem":90,"stories":91},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",14,{"slug":93,"name":94,"problem":95,"stories":96},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",11,[98,104,109,115,118,124,129,134],{"family":99,"item":100,"code":101,"title":102,"together":103},"cis","13","Control 13","Network Monitoring and Defense",57,{"family":99,"item":105,"code":106,"title":107,"together":108},"17","Control 17","Incident Response Management",45,{"family":110,"item":111,"code":112,"title":113,"together":114},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",43,{"family":116,"item":6,"code":117,"title":117,"together":72},"itil","ITIL",{"family":119,"item":120,"code":121,"title":122,"together":123},"nist-800-53","ir-4","IR-4","Incident Handling",38,{"family":125,"item":126,"code":127,"title":128,"together":123},"nist-sp","800-61","SP 800-61","SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management",{"family":99,"item":130,"code":131,"title":132,"together":133},"8","Control 8","Audit Log Management",25,{"family":119,"item":135,"code":136,"title":137,"together":133},"si-3","SI-3","Malicious Code Protection"]