MITRE ATT&CK: Port knocking
Ports are like the doors into or out of a network, where information must pass through them to enter or exit an organization’s network. Now, when you knock...
MITRE ATT&CK™
MITRE ATT&CK vulnerability spotlight: Forced authentication
The ATT&CK framework is a product of MITRE, one of the federally funded research and development centers (FFRDCs) designed to support the U.S. government...
MITRE ATT&CK vulnerability spotlight: Exploitation for credential access
MITRE is a federally-funded research and development center (FFRDC) for the U.S. government. As an FFRDC, MITRE performs a variety of different functions for...
MITRE ATT&CK: External remote services
In this article, we will discuss the various ways that attackers are able to abuse external remote services to gain unauthorized access into internal networks....
MITRE ATT&CK: Exploiting a public-facing application
Public/internet-facing applications are the most common applications present on the internet today. In this article, we’ll take a close look at these applications....
MITRE ATT&CK: Drive-by compromise
In this article, we will discuss drive-by compromise attacks: exactly what they are and the different forms they can take. We will also see examples of how...
MITRE ATT&CK vulnerability spotlight: Credentials in registry
MITRE is a U.S. government federally-funded research and development center (FFRDC). Its purpose is to act as a trusted third-party for the U.S. government,...
MITRE ATT&CK vulnerability spotlight: Credentials in files
MITRE is a federally-funded research and development center (FFRDC) for the U.S. government. As part of its duties as an FFRDC, it performs research and development...
MITRE ATT&CK vulnerability spotlight: Brute force
The MITRE ATT&CK matrix is a tool developed by MITRE, a U.S. government federally-funded research and development center (FFRDC). It is designed to help...
MITRE ATT&CK: Hardware Additions
In this article, we shall discuss the very real threat of malicious hardware additions, what they are and their different types and forms, application areas...