Security News > 2021 > May > ATT&CK v9 Introduces Containers, Google Workspace

MITRE announced last week that the latest update to the popular ATT&CK framework introduces techniques related to containers and the Google Workspace platform.
ATT&CK v9 adds container-related attack techniques, which is the result of a project conducted by MITRE's Center for Threat-Informed Defense and sponsored by Microsoft, Citigroup and JPMorgan Chase.
As for the addition of Google Workspace, MITRE explained, "Since ATT&CK already covers Office 365, we wanted to ensure that users of Google's productivity tools were also able to map similar applicable adversary behaviors to ATT&CK.".
Another significant change in ATT&CK v9 is related to cloud platforms - AWS, Azure and Google Cloud Platform have been consolidated into a single infrastructure-as-a-service platform.
ATT&CK v9 covers 14 tactics, 185 techniques, and 367 sub-techniques, as well as 16 new threat groups and 67 new pieces of software.
Last year, MITRE announced the release of an ATT&CK knowledge base for industrial control systems, and introduced a knowledge base of techniques and tactics that defenders can use to secure their networks and assets.