MITRE Engenuity’s Center for Threat-Informed Defense (CTID) releases new methodology

Today, MITRE Engenuity’s Center for Threat-Informed Defense (CTID) released a new methodology to use the adversary behaviors described in MITRE ATT&CK® to characterize the impact of vulnerabilities from CVE®.

This methodology aims to establish a critical connection between vulnerability management, threat modeling, and compensating controls. CVEs linked to ATT&CK techniques can empower defenders to better assess the true risk posed by specific vulnerabilities in their environment. MITRE has applied the methodology and mapped several hundred CVEs to ATT&CK to validate the model and demonstrate its value.

Learn more here.