Security News > 2021 > May > ATT&CK v9 Introduces Containers, Google Workspace

ATT&CK v9 Introduces Containers, Google Workspace
2021-05-04 08:39

MITRE announced last week that the latest update to the popular ATT&CK framework introduces techniques related to containers and the Google Workspace platform.

ATT&CK v9 adds container-related attack techniques, which is the result of a project conducted by MITRE's Center for Threat-Informed Defense and sponsored by Microsoft, Citigroup and JPMorgan Chase.

As for the addition of Google Workspace, MITRE explained, "Since ATT&CK already covers Office 365, we wanted to ensure that users of Google's productivity tools were also able to map similar applicable adversary behaviors to ATT&CK.".

Another significant change in ATT&CK v9 is related to cloud platforms - AWS, Azure and Google Cloud Platform have been consolidated into a single infrastructure-as-a-service platform.

ATT&CK v9 covers 14 tactics, 185 techniques, and 367 sub-techniques, as well as 16 new threat groups and 67 new pieces of software.

Last year, MITRE announced the release of an ATT&CK knowledge base for industrial control systems, and introduced a knowledge base of techniques and tactics that defenders can use to secure their networks and assets.


News URL

http://feedproxy.google.com/~r/Securityweek/~3/ENzirgSKkwE/attck-v9-introduces-containers-google-workspace

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Google 141 996 4899 2857 1622 10374