#mitre — Public Fediverse posts

Resulting from funding gaps and idiotic shifts in priorities the U.S.A. is now woefully under investing in our core CyberDefense Ecosystem....

National Institute of Standards and Technology (NIST) is no longer enhancing all Common Vulnerabilities and Exposures (CVEs) with analysis and severity indicators, and instead NIST will prioritize enriching a much narrower set of security vulnerabilities.

Related: In April 2025, a funding gap by in DHS appropriations threatened to cease CVE operations entirely —which would have creating systemic risk for global vulnerability management. An emergency funding extension was implemented to avoid a full on crisis. https://www.justsecurity.org/136914/nist-cant-keep-up/ #NIST #MITRE #CVEs #NVD #Security #Risk #CyberSecurity #CyberDefence #CyberInfrastructure #AI #AISecurity #CISA #DHS #Vulnerability #ThreatIntelligence

Resulting from funding gaps and idiotic shifts in priorities the U.S.A. is now woefully under investing in our core CyberDefense Ecosystem....

National Institute of Standards and Technology (NIST) is no longer enhancing all Common Vulnerabilities and Exposures (CVEs) with analysis and severity indicators, and instead NIST will prioritize enriching a much narrower set of security vulnerabilities.

Related: In April 2025, a funding gap by in DHS appropriations threatened to cease CVE operations entirely —which would have creating systemic risk for global vulnerability management. An emergency funding extension was implemented to avoid a full on crisis. https://www.justsecurity.org/136914/nist-cant-keep-up/ #NIST #MITRE #CVEs #NVD #Security #Risk #CyberSecurity #CyberDefence #CyberInfrastructure #AI #AISecurity #CISA #DHS #Vulnerability #ThreatIntelligence

Resulting from funding gaps and idiotic shifts in priorities the U.S.A. is now woefully under investing in our core CyberDefense Ecosystem....

National Institute of Standards and Technology (NIST) is no longer enhancing all Common Vulnerabilities and Exposures (CVEs) with analysis and severity indicators, and instead NIST will prioritize enriching a much narrower set of security vulnerabilities.

Related: In April 2025, a funding gap by in DHS appropriations threatened to cease CVE operations entirely —which would have creating systemic risk for global vulnerability management. An emergency funding extension was implemented to avoid a full on crisis. https://www.justsecurity.org/136914/nist-cant-keep-up/ #NIST #MITRE #CVEs #NVD #Security #Risk #CyberSecurity #CyberDefence #CyberInfrastructure #AI #AISecurity #CISA #DHS #Vulnerability #ThreatIntelligence

Resulting from funding gaps and idiotic shifts in priorities the U.S.A. is now woefully under investing in our core CyberDefense Ecosystem....

National Institute of Standards and Technology (NIST) is no longer enhancing all Common Vulnerabilities and Exposures (CVEs) with analysis and severity indicators, and instead NIST will prioritize enriching a much narrower set of security vulnerabilities.

Related: In April 2025, a funding gap by in DHS appropriations threatened to cease CVE operations entirely —which would have creating systemic risk for global vulnerability management. An emergency funding extension was implemented to avoid a full on crisis. https://www.justsecurity.org/136914/nist-cant-keep-up/ #NIST #MITRE #CVEs #NVD #Security #Risk #CyberSecurity #CyberDefence #CyberInfrastructure #AI #AISecurity #CISA #DHS #Vulnerability #ThreatIntelligence

Resulting from funding gaps and idiotic shifts in priorities the U.S.A. is now woefully under investing in our core CyberDefense Ecosystem....

National Institute of Standards and Technology (NIST) is no longer enhancing all Common Vulnerabilities and Exposures (CVEs) with analysis and severity indicators, and instead NIST will prioritize enriching a much narrower set of security vulnerabilities.

Related: In April 2025, a funding gap by in DHS appropriations threatened to cease CVE operations entirely —which would have creating systemic risk for global vulnerability management. An emergency funding extension was implemented to avoid a full on crisis. https://www.justsecurity.org/136914/nist-cant-keep-up/ #NIST #MITRE #CVEs #NVD #Security #Risk #CyberSecurity #CyberDefence #CyberInfrastructure #AI #AISecurity #CISA #DHS #Vulnerability #ThreatIntelligence

You have discovered a new vulnerability? Submit it here and we will assign a CVE in no time. https://vuldb.com/vuln/add #vuldb #cna #cve #mitre #nvd

You have discovered a new vulnerability? Submit it here and we will assign a CVE in no time. https://vuldb.com/vuln/add #vuldb #cna #cve #mitre #nvd

You have discovered a new vulnerability? Submit it here and we will assign a CVE in no time. https://vuldb.com/vuln/add #vuldb #cna #cve #mitre #nvd

You have discovered a new vulnerability? Submit it here and we will assign a CVE in no time. https://vuldb.com/vuln/add #vuldb #cna #cve #mitre #nvd

You have discovered a new vulnerability? Submit it here and we will assign a CVE in no time. https://vuldb.com/vuln/add #vuldb #cna #cve #mitre #nvd

Extracted CAPEC to CWE Mappings (first 10 examples)...
Total CVEs with CAPEC relationships found: 6

#Mitre #CAPEC #CWE #CyberThreats
2/2

Cyrela (CYRE3), Mitre (MTRE3) e Even (EVEN3): prévias dividem mercado, mas qualidade melhora

🇧🇷 Leia mais: https://guiadoinvestidor.com.br/mercado/cyrela-cyre3-mitre-mtre3-e-even-even3-previas-dividem-mercado-mas-qualidade-melhora/

#Mercado #Cyrela #Even #Mitre

ClearWater — обзор нового шифровальщика

Приветствую, сегодня я расскажу про новый шифровальщик, который мне удалось обнаружить на просторах Интернета. Первые упоминания ClearWater появились ещё в январе 2026 года. Исследуя всемирную паутину, я ещё не находил ни одной нормальной статьи по этому вредоносу, поэтому решил сам написать такую. Данный шифровальщик не отличается какой-то технической сложностью или необычными приемами поэтому его обзор несёт больше информативный характер и предназначен для Malware и TI-аналитиков.

https://habr.com/ru/articles/1018822/

#ClearWater #шифровальщик #вредонос #вредоносное_по #реверсинжиниринг #реверс #анализ_вредоносов #yara #mitre

ClearWater — обзор нового шифровальщика

Приветствую, сегодня я расскажу про новый шифровальщик, который мне удалось обнаружить на просторах Интернета. Первые упоминания ClearWater появились ещё в январе 2026 года. Исследуя всемирную паутину, я ещё не находил ни одной нормальной статьи по этому вредоносу, поэтому решил сам написать такую. Данный шифровальщик не отличается какой-то технической сложностью или необычными приемами поэтому его обзор несёт больше информативный характер и предназначен для Malware и TI-аналитиков.

https://habr.com/ru/articles/1018822/

#ClearWater #шифровальщик #вредонос #вредоносное_по #реверсинжиниринг #реверс #анализ_вредоносов #yara #mitre

ClearWater — обзор нового шифровальщика

Приветствую, сегодня я расскажу про новый шифровальщик, который мне удалось обнаружить на просторах Интернета. Первые упоминания ClearWater появились ещё в январе 2026 года. Исследуя всемирную паутину, я ещё не находил ни одной нормальной статьи по этому вредоносу, поэтому решил сам написать такую. Данный шифровальщик не отличается какой-то технической сложностью или необычными приемами поэтому его обзор несёт больше информативный характер и предназначен для Malware и TI-аналитиков.

https://habr.com/ru/articles/1018822/

#ClearWater #шифровальщик #вредонос #вредоносное_по #реверсинжиниринг #реверс #анализ_вредоносов #yara #mitre

ClearWater — обзор нового шифровальщика

Приветствую, сегодня я расскажу про новый шифровальщик, который мне удалось обнаружить на просторах Интернета. Первые упоминания ClearWater появились ещё в январе 2026 года. Исследуя всемирную паутину, я ещё не находил ни одной нормальной статьи по этому вредоносу, поэтому решил сам написать такую. Данный шифровальщик не отличается какой-то технической сложностью или необычными приемами поэтому его обзор несёт больше информативный характер и предназначен для Malware и TI-аналитиков.

https://habr.com/ru/articles/1018822/

#ClearWater #шифровальщик #вредонос #вредоносное_по #реверсинжиниринг #реверс #анализ_вредоносов #yara #mitre

Менеджеры паролей — решение извечной проблемы слабой парольной политики

Привет всем! На связи аналитики из команды PT Cyber Analytics. Мы сопровождаем red‑team‑проекты и помогаем клиентам разобраться в результатах работы белых хакеров. Детально анализируем результаты тестирований на проникновение, оцениваем риски, связанные с обнаруженными уязвимостями, определяем уровень защищенности компаний и разрабатываем рекомендации по устранению слабых мест в инфраструктуре. В этой статье мы проанализируем практики безопасного использования менеджеров паролей. Рассмотрим принципы работы различных типов менеджеров и их архитектуру, методы защиты, возможные угрозы безопасности, некоторые примеры взломов, а также способы минимизации рисков. Кроме того, уделим внимание рекомендациям по мониторингу и реагированию на инциденты, связанные с менеджерами паролей.

https://habr.com/ru/companies/pt/articles/1008480/

#менеджер_паролей #onpremises #saas #уязвимости #mitre #keepass #2faаутентификация #sso

Are there any best practices out there to connect #MITRE #ATT&CK and #D3FEND while doing a #Threatmodel in a #TOGAF #ADM security architecture?

How do I go from »There is an attack vector!« to »The developers closed their tickets which implement all relevant counter measures«?

Does #SABSA or #PASTA offer any insight here?

Are there any best practices out there to connect #MITRE #ATT&CK and #D3FEND while doing a #Threatmodel in a #TOGAF #ADM security architecture?

How do I go from »There is an attack vector!« to »The developers closed their tickets which implement all relevant counter measures«?

Does #SABSA or #PASTA offer any insight here?

You want to publish a new vulnerability? Just submit and we will handle your CVE assignment in no time. https://vuldb.com/?id.add #vuldb #cna #cve #mitre #nvd

You want to publish a new vulnerability? Just submit and we will handle your CVE assignment in no time. https://vuldb.com/?id.add #vuldb #cna #cve #mitre #nvd

You want to publish a new vulnerability? Just submit and we will handle your CVE assignment in no time. https://vuldb.com/?id.add #vuldb #cna #cve #mitre #nvd

You want to publish a new vulnerability? Just submit and we will handle your CVE assignment in no time. https://vuldb.com/?id.add #vuldb #cna #cve #mitre #nvd

You want to publish a new vulnerability? Just submit and we will handle your CVE assignment in no time. https://vuldb.com/?id.add #vuldb #cna #cve #mitre #nvd

You want to publish a new vulnerability? Just submit and we will handle your CVE assignment in no time. https://vuldb.com/?id.add #vuldb #cna #cve #mitre #nvd

You want to publish a new vulnerability? Just submit and we will handle your CVE assignment in no time. https://vuldb.com/?id.add #vuldb #cna #cve #mitre #nvd

You want to publish a new vulnerability? Just submit and we will handle your CVE assignment in no time. https://vuldb.com/?id.add #vuldb #cna #cve #mitre #nvd

You want to publish a new vulnerability? Just submit and we will handle your CVE assignment in no time. https://vuldb.com/?id.add #vuldb #cna #cve #mitre #nvd

You want to publish a new vulnerability? Just submit and we will handle your CVE assignment in no time. https://vuldb.com/?id.add #vuldb #cna #cve #mitre #nvd

----------------

🛠️ Tool
===================

Opening: Blue Team Assistant is a local-first security analysis toolkit targeted at Tier 2/3 SOC analysts, incident responders, and threat hunters. The project aggregates threat intelligence, professional malware analysis capabilities, and optional local LLM support via Ollama to enable AI-assisted investigations without cloud dependency.

Key features:
• Multi-source threat intelligence: Integrates 20+ feeds including VirusTotal, Shodan, AbuseIPDB, and AlienVault OTX for enrichment and context.
• Malware and file analysis: PE/ELF/Mach‑O parsing, entropy analysis, string extraction and YARA scanning to identify suspicious characteristics.
• Email forensics: Header parsing, attachment extraction, phishing detection and URL chain analysis for email-based investigations.
• Detection rule generation: Automated output generation for YARA, Sigma, KQL, and Snort/Suricata formats to support detection and hunting pipelines.
• Reporting and scoring: Interactive HTML reports with MITRE ATT&CK mapping and a production-grade composite scoring model with confidence levels.
• Local LLM integration: Ollama support for offline AI analysis; cloud LLM providers are optional but not required.

Technical implementation:
• Architecture model: CLI component (soc_agent), MCP server mode, and a Python API layer that orchestrates an extensible tools layer for lookups and offline analyzers.
• Operational model: Asynchronous multi-source queries enable faster parallel enrichment; rule generation pipelines translate analysis outputs to multiple detection formats.

Use cases:
• Triage and enrichment of suspicious artifacts during IR workflows.
• Threat hunting using aggregated TI and generated Sigma/KQL rules.
• Malware analysts producing YARA rules and contextualized reports mapped to MITRE ATT&CK.

Limitations and considerations:
• Ollama or similar local LLM infrastructure is required to use the AI-assisted features; offline operation depends on the local model’s capability and resources.
• No cloud requirement is enforced, but some optional modules reference external feeds that may require API keys or access privileges.

References:
• Project indicates MIT license and current version 1.0.0.

🔹 tool #yara #sigma #ollama #mitre

🔗 Source: https://github.com/ugurrates/Blue-Team-Assistant

El lado del mal - OpenAI y el bloqueo de cuentas que usan sus modelos para hacer cosas "malas" https://www.elladodelmal.com/2025/10/openai-y-el-bloqueo-de-cuentas-que-usan.html #OpenAI #ChatGPT #Cibercrimen #ciberestafas #phishing #fakeNews #Propaganda #smishing #Sora2 #malware #Mitre #InteligenciaArtificial #AI #IA #LLM

El lado del mal - OpenAI y el bloqueo de cuentas que usan sus modelos para hacer cosas "malas" https://www.elladodelmal.com/2025/10/openai-y-el-bloqueo-de-cuentas-que-usan.html #OpenAI #ChatGPT #Cibercrimen #ciberestafas #phishing #fakeNews #Propaganda #smishing #Sora2 #malware #Mitre #InteligenciaArtificial #AI #IA #LLM

El lado del mal - OpenAI y el bloqueo de cuentas que usan sus modelos para hacer cosas "malas" https://www.elladodelmal.com/2025/10/openai-y-el-bloqueo-de-cuentas-que-usan.html #OpenAI #ChatGPT #Cibercrimen #ciberestafas #phishing #fakeNews #Propaganda #smishing #Sora2 #malware #Mitre #InteligenciaArtificial #AI #IA #LLM

Киберугрозы в первом полугодии 2025 года: анализ векторов атак на облачные и гибридные инфраструктуры

Привет, Хабр! Меня зовут Юрий Наместников, я руковожу Cloud Security Operations в Yandex Cloud, и сегодня мы поговорим о результатах анализа кибератак в первом полугодии 2025 года. За первые шесть месяцев 2025 года мы зафиксировали более 25 тыс. попыток кибератак на облачные и гибридные инфраструктуры. В этом отчёте с результатами нашего исследования рассказываем об актуальных угрозах и тенденциях, которые видели как в собственном контуре, так и в целом у российских компаний в первом полугодии

https://habr.com/ru/companies/yandex_cloud_and_infra/articles/941752/

#безопаность #облака #ycdr #cspm #kspm #mitre #mitre_attack

MITRE ATT&CK & Cyber Risk Institute Mapping
Mapping the Cyber Risk Institute framework to MITRE ATT@CK. Why not?
https://wadebach.blackcatwhitehatsecurity.com/blog.cfm#CRImapping
#MITRE #ATTACK #Cyber #Risk #Institute #Mapping #programming #CFML #ColdFusion

Can, should the #EU step in with filling the gap left behind by #MITRE & #CVE ?

Sure: this is clearly for the public good, and plays nicely with the work on #CRA #PLD #NIS2 etc.

A key problem is the sheer velocity: destruction via tyranny&fascism is fast, building up structures via democratic processes relatively slow.

The EU needs a Fast Track Program to respond to the chaos of the US. The time is ... yesterday.

#OpenSource #Software #ITSecurity #CyberSecurity #DigitalSovereignity

At @hack_lu #hacklu2024 Jeroen Pinoy concludes that the #MITRE #ATTA&K framework doesn’t have sufficient granularity to enable researchers and defenders to tell cloaking from other events/threat vectors.

Hint: You can model this in #OpenTIDE :)

🔈Monthly release of 𝐖𝐡𝐚𝐭'𝐬 𝐧𝐞𝐰 𝐢𝐧 𝐓𝐈 𝐌𝐢𝐧𝐝𝐦𝐚𝐩 | 𝐌𝐚𝐲 2024. 🔈
Article and tool co-authored with Oleksiy Meletskiy.
📢 New Features:
➡𝐖𝐫𝐢𝐭𝐞-𝐮𝐩 𝐬𝐜𝐫𝐞𝐞𝐧𝐬𝐡𝐨𝐭
➡𝐕𝐢𝐫𝐮𝐬𝐓𝐨𝐭𝐚𝐥 𝐈𝐎𝐂𝐬 𝐞𝐧𝐫𝐢𝐜𝐡𝐦𝐞𝐧𝐭
➡𝐄𝐦𝐛𝐞𝐝𝐝𝐞𝐝 𝐌𝐈𝐓𝐑𝐄 𝐀𝐓𝐓&𝐂𝐊® 𝐍𝐚𝐯𝐢𝐠𝐚𝐭𝐨𝐫
➡𝐏𝐃𝐅 𝐫𝐞𝐩𝐨𝐫𝐭 𝐢𝐦𝐩𝐫𝐨𝐯𝐞𝐦𝐞𝐧𝐭𝐬

📰𝐁𝐥𝐨𝐠: https://lnkd.in/dgTnd-uD

💻 𝐀𝐩𝐩: https://lnkd.in/dSVdG2B4
⏩ 𝐆𝐢𝐭𝐇𝐮𝐛: https://lnkd.in/dJDSQx8Y

𝐇𝐨𝐰 𝐭𝐨 𝐠𝐞𝐭 𝐢𝐧𝐯𝐨𝐥𝐯𝐞𝐝
The project is open to external contributions.
To collaborate, please check the GitHub repository: https://lnkd.in/dJDSQx8Y

If you find TI Mindmap useful, please consider starring ⭐ the repository on GitHub.
hashtag

#timindmap #ti #mindmap hashtag#mistral #ai #mistralai #threatintelligence #llm #llmapp #openai #azureopenai #largelanguagemodel #cybersecurity #cyber #security #python #streamlit #infer #embedding #chat #ioc #mitre
#ttp #cyberreport #report #mermaid #genai #generativeai #cyberthreatintelligence #github #prompt #promptengineering #FewShotPrompting #gpt hashtag#gpt4 #api #DataVisualization #threat #infosec #threatreport hashtag#oai #analyst #soc #cert #thumbnail #virustotal #stix #GPTo

𝗔𝗻𝗻𝗼𝘂𝗻𝗰𝗶𝗻𝗴 𝗻𝗲𝘄 𝗖𝗡𝗔𝗣𝗣 𝗰𝗮𝗽𝗮𝗯𝗶𝗹𝗶𝘁𝗶𝗲𝘀 𝗶𝗻 𝗗𝗲𝗳𝗲𝗻𝗱𝗲𝗿 𝗳𝗼𝗿 𝗖𝗹𝗼𝘂𝗱

At Ignite 2023, we are excited to announce new innovations in Microsoft Defender for Cloud that will help security admins strengthen their CNAPP deployment, improve the cloud security posture through additional code to cloud insights, and protect cloud-native applications across multicloud environments in a unified solution:

➡ Unified insights from Microsoft Entra Permissions Management (CIEM) to enable comprehensive risk mitigation

➡Enhanced attack path analysis engine to swiftly pinpoint critical risks across clouds

➡Accelerated critical risk remediation with Microsoft Security Copilot integration

➡Integrated security across multiple DevOps platforms

Extended protection for cloud workloads

➡Improved API Security Posture

➡Go beyond workload protection – detect and respond to threats across the enterprise in a unified platform

More details:

https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/announcing-new-cnapp-capabilities-in-defender-for-cloud/ba-p/3981941

#cnapp #devops #api #protection #ciem #cwp #cspm #defender #defenderforcloud #azure #gcp #aws #cloud #cloudnative #cloudprotection #cloudsecurity #multicloud #microsoft #microsoftsecurity #soc #ignite #microsoftignite #permissionmanagement #ai #mitre #copilot #securitycopilot #vulnerability