MITRE
Finally, CTEM and MITRE INFORM Without the Jargon
Your vulnerability scanner just came back with 10,000 findings. Your pen test report has a 47-page appendix. Your threat intel feed is piling up faster than anyone can read it. And somewhere ...
From Exposure to Assurance: How CTEM and MITRE INFORM Enable Modern Cyber Defense
What if you could prove—right now—that your defenses actually work? See how CTEM and MITRE INFORM turn exposure data into real, board-level confidence. The post From Exposure to Assurance: How CTEM and ...
Why I Chose to Join AttackIQ as a Senior Advisor
After 30 years in cyber defense and research, I joined AttackIQ to bring clarity and prioritize what truly matters in security. The post Why I Chose to Join AttackIQ as a Senior ...
INFORM 2026: MITRE’s Updated Threat-Informed Defense Maturity Model Explained
On January 8th, MITRE’s Center for Threat-Informed Defense (CTID) published a significant update to INFORM, its threat-informed defense maturity model. This update reflects the joint efforts of MITRE researchers, AttackIQ, and several ...
CISA Lays Out Roadmap for CVE Program’s ‘Quality Era’
Five months after the future of the CVE program was thrown in doubt, CISA this week released a roadmap that calls for steps to take for its new "quality era," which includes ...
The Foundation Is Cracking: Why Hardware Security Can’t Be an Afterthought Anymore
I was scrolling through my security feeds this morning when I came across news that MITRE has finally updated their Most Important Hardware Weaknesses List. While this should have been cause for ...
Breaking the Kill Chain: A Defensive Approach
First developed by Lockheed Martin, the Cybersecurity Kill Chain is a model for describing the steps an attacker must complete to carry a successful attack. This model is made up ...
EU Stakes Out Digital Sovereignty With Vulnerability Database
Depending on who’s doing the talking, the new European Vulnerability Database (EUVD), set up by the European Union Agency for Cybersecurity (ENISA) and which recently went operational, is a much-needed alternative to ...
As US CVE Database Fumbles, EU ‘Replacement’ Goes Live
Diesen Kuß der ganzen Welt! European Union Vulnerability Database (EUVD) launches this week. And not a moment too soon ...
MITRE Crisis: CVE Cash Ends TODAY — CISA says ‘No Lapse’
These are “interesting” times: U.S. government funding for the Common Vulnerabilities and Exposures program expires April 16 ...

