AttackIQ

Your AI systems are already part of the attack surface. MITRE ATLAS maps how adversaries target the models, data, and pipelines behind them, using real-world research. Join AttackIQ, MITRE CTID, Fujitsu, Ensign InfoSecurity & Fortinet July 16. Register: attackiq.com/resources/webi…

10,000+ critical/high severity vulnerabilities surfaced in a month across 50 orgs using the same AI tool. Finding flaws stopped being the hard part. The number worth watching now is threat debt: adversary opportunity in your environment. 📖 attackiq.com/2026/07/08/fin…

"How do I apply CTEM?" "How do I get ahead of threat debt?" "How do I get an AttackIQ shirt?" All valid questions, all answered at Booth 1957, Black Hat 2026, Aug 4-6 at Mandalay Bay. Live demos, a Superfrico dinner, and yes, shirts. Book a meeting: attackiq.com/lp/black-hat-2…

Everest ransomware isn't done just because a machine is powered off. It scans the ARP cache and sends Wake-on-LAN packets to wake sleeping hosts, downgrades its own encryption, kills Raccine, and blocks taskkill from SYSTEM. Full breakdown: attackiq.com/2026/07/02/eve…

July 16: MITRE's Center for Threat-Informed Defense walks through what's new in Secure AI, the project sharpening MITRE ATLAS™ with real research on how adversaries attack AI systems. With Fujitsu, Ensign InfoSecurity & Fortinet. 1 CPE credit. Register: attackiq.com/resources/webi…

The bar for federal cyber just went up. Showing controls exist isn't enough anymore. Agencies have to prove defenses work. July 16 in DC: a half-day Lunch & Learn with FRC, Carahsoft, Trellix & AttackIQ on closing that gap. 2 CPE credits. 👉 fedresources.com/events-civ-lun…

Your vulnerability backlog says how busy your team is. It says nothing about what an attacker can actually reach. Threat debt measures the real opportunity: the paths that lead to your critical assets. How to pay it down 👇 attackiq.com/resources/whit…

Your AI systems are part of your attack surface. The model, training data, inference APIs, and agents are all targets. MITRE ATLAS catalogs the tactics adversaries use against AI, backed by real-world case studies. Check out all the new updates: ctid.mitre.org/blog/2026/05/0…

How mature is your threat-informed defense, and where are the real gaps? Our free MITRE INFORM assessment scores you in ~10 min. Finish before July 1 and you're entered to win one of two Black Hat USA 2026 Briefings passes (up to $3,399 each). 👉 attackiq.com/inform-tool

You know ATT&CK. It maps how adversaries operate. Fewer people know MITRE INFORM, which maps the defense: the practices that make a program threat-informed. We built a free assessment on it. Score your maturity in minutes. Run your baseline: attackiq.com/inform-tool/?u…

A CVSS 9.8 in your scanner ≠ a CVSS 9.8 in your environment. Static scores rank globally. They don't know your attack paths. June 9: how vulnerability teams are prioritizing based on what's actually exploitable in their environment. Register Now: attackiq.com/resources/webi…

The command line never disappeared. It went underground, used by developers and power users. AI is bringing it back, in a form anyone can use. The most powerful interface is now conversational. The most important skill is framing problems clearly. attackiq.com/2026/06/02/bac…

One compromised machine can become a network-wide disruption fast. The Gentlemen ransomware's Go-based encryptor spreads via SMB before defenders know the first endpoint is hit. Understand where it moves and whether your controls can stop it. csoonline.com/article/417858…

When the board asks "are we secure?", most teams reach for a dashboard and hope. 🙏 AttackIQ and Acumen Cyber have partnered to help security teams see what their controls stop, where the real paths run, and whether exposure is shrinking. 🔗 attackiq.com/resources/pres…

The ideal espionage target: telecoms. Black Lotus Labs uncovered "Showboat" — Chinese nation-state malware quietly embedded in telecom infrastructure since 2022. One host compromised. Every downstream org at risk. Read the article from @Cybernews: cybernews.com/security/china…

Living-off-the-land, double-extortion, cross-platform. The Gentlemen ransomware has been quietly effective since July 2025. AttackIQ now has assessments to test your controls against their full TTP chain. attackiq.com/2026/05/21/gen…

Knowing your craft is one thing. Being known for it is another. The AttackIQ Champions Program is for practitioners who want to learn and be a voice for the industry. Free training in MITRE ATT&CK, CTEM and more. Applications are open now: attackiq.com/2026/05/20/att…

MITRE ATLAS™ is ATT&CK for AI. The latest release adds 45+ new techniques, expanded LLM and agentic AI coverage, and the first Rapid Response Report for AI security incidents. Check the matrix: atlas.mitre.org Explore all the new updates: ctid.mitre.org/blog/2026/05/0…

Attackers scan newly disclosed CVEs within 15 minutes. Federal ATO timelines run 6-18 months. The authorization cycle wasn't built for an adversary moving at machine speed. Register to hear from practitioners on the frontlines of federal cyber defense. attackiq.com/resources/webi…

"Critical" CVEs aren't what's getting exploited most—high & medium vulnerabilities are. In our opinion, your SLAs are built on math the data no longer supports. If your program runs on CVSS scores & calendar cycles, this Gartner report is worth a read. attackiq.com/resources/repo…