MITRE ATT&CK® - A knowledge base for describing the behavior of adversaries. Replying/Following/Re-tweeting ≠ endorsement. @ attack.mitre.org
McLean, VA
Based in United States
- Tweets 2,832
- Following 514
- Followers 119,177
- Likes 2,655
ATT&CKcon 7.0 in person ticket sales are open! Come join us 10/27-28 at ATT&CK HQ in McLean, VA. Catch two days of talks related to ATT&CK, network with the community, work with members of our team in person, and enjoy excellent snacks, meals, and drinks. na.eventscloud.com/website/9…
3
1
9
8,407
Today's the day. Tonight (7/2) at 8p ET we'll be shutting off submissions for ATT&CKcon 7.0. Historically 1/3 to 1/2 of submissions come in today, so you're not alone!
Have something cool you've been up to with ATT&CK? A rant about our last release? openconf.org/ATTACKcon2026/o…
3
2
15
9,085
It's the final countdown for the ATT&CKcon CFP
Friendly reminder that our CFP closes 7/2 at 8PM ET. If your entry is still 3 bullet points in Notes, or a fully formed concept you've been "letting marinate," this is your sign.
Hitting submit is underrated openconf.org/ATTACKcon2026/o…
3
7
8,719
On Cat World Domination Day, it feels only right to acknowledge the obvious (cats run everything). Even if you don't answer to a 🐈 overlord, a reminder that the ATT&CKcon 7.0 CFP closes 7/2 at 8pm ET. Take back a bit of control and submit before next Thu: openconf.org/ATTACKcon2026/o…
1
1
7
5,965
Every year, without fail, we get a handful of emails after the ATT&CKcon CFP deadline that say some variation of, "I was just about to submit..." Don't be that person.
CFP closes 7/2 at 8:00 PM EDT. No extensions, no secret back door, no "just one more."
openconf.org/ATTACKcon2026/
6
13
5,314
The ATT&CKcon 7.0 CFP is open! Want to join us on stage in McLean, VA, 10/28-29? We'd love to hear your best talk ideas with some relation to ATT&CK so we can bring to the wider ATT&CK community.
To submit to go openconf.org/ATTACKcon2026/ before 8pm ET on July 2nd.
4
6
25
12,156
ATT&CK v19 is coming 4/28! The biggest change this release is the replacement of the Defense Evasion tactic in Enterprise ATT&CK with new Stealth and Impair Defenses tactic. @coolestcatiknow talked more about what's changing back at ATT&CKcon 6.0 piped.video/watch?v=0rQQhSXT….
3
36
109
9,813
Pencil in Oct 27-28 for ATT&CKcon 7.0! We'll be live for both in-person in McLean, VA and live online. Drop us a line at attackcon@mitre.org if you'd like to sponsor, watch for our CFP to open in May, and grab a ticket when they go on sale this summer.
See you in October!
1
13
45
10,839
🚨Big changes coming to ATT&CK on Tuesday (10/28) as we improve detections! It you use x_mitre_detection or x_mitre_data_sources, you'll need to update.
@LexOnTheHunt has covered what's happening at:
🖥️mitre.app.box.com/s/3lynwg8e… 📽️mitre.brandlive.com/MITRE-AT…
📖medium.com/p/7e6738fec31f
3
9
4,156
Want to be the first to know the latest on ATT&CK? Time's running out to join us in-person Oct 14-15 for ATT&CKcon 6.0. For tickets or to checkout our line-up of talks from the ATT&CK team and the ATT&CK community head over to na.eventscloud.com/attackcon….
3
15
5,663
Thank you to @LBGplc for becoming ATT&CK's first Advocate level Benefactor (mitre.org/news-insights/news…). Lloyds' generous contribution helps us take ATT&CK even further.
Interested in joining the illustrious group at attack.mitre.org/resources/e…? Drop us a line at attack@mitre.org!
2
2
5
5,973
Virtual registration for ATT&CKcon 6.0 is open! We hope you'll chose to join us in person at our home in McLean, VA October 14-15. But if you can't, catch the action free online by registering @ na.eventscloud.com/attackcon…. Catch all of our talks & some exclusive online only content.
10
16
8,354
The ATT&CKcon 6.0 talk lineup is now live! Check out our fabulous group of speakers, or pick up a ticket to join us October 14-15 in McLean, VA at na.eventscloud.com/attackcon…. Only able to join us virtually? Hang tight, virtual registration opens September 3rd.
1
6
16
13,085
Tonight's the night! The ATT&CKcon 6.0 CFP will automatically stop accepting submissions at 8pm ET tonight. Historically we get about half of our submissions today, so all you procrastinators are in good company.
Give it your best shot at openconf.org/ATTACKCON2025.
1
2
7
3,514
It's the final countdown on the ATT&CKcon 6.0 CFP! Our CFP system will be closing next Wednesday, 7/9, at 8pm ET sharp. We're hoping to hear what great/crazy/terrible/inspiring things you've done related to ATT&CK on our McLean, VA stage Oct 14-15. openconf.org/ATTACKCON2025/o…
2
4
4,053
Less than a month left on the ATT&CKcon 6.0 CFP! Submitting is the only way to join us on stage in McLean, VA October 14-15, 2025, pitch us on your best ATT&CK related talk! Our CFP will close on July 9th at 8pm ET sharp, and it's OK to submit before then. openconf.org/ATTACKCON2025/o…
5
8
4,424
The MITRE ATT&CKcon 6.0 CFP is now open! Are you interested in joining us on the ATT&CKcon stage in McLean, VA October 14-15, 2025? Pitch us on your best ATT&CK related talk! Our CFP will close on July 9th at 8pm ET sharp, so get those proposals started.
openconf.org/ATTACKCON2025/o…
1
10
25
12,565
Today we're launching a new system where the public can help us develop the next ATT&CK release through Macrotechnique Refinement. To start refining FUZZYSNUGGLYDUCK, click here: attack.mitre.org/macro-techn…. Fabulous prizes await success.
3
18
43
8,150
Celebrate April 22nd with ATT&CK v17!
The next version of ATT&CK is almost here, with new content related to the ESXi hypervisor, broad improvements to defenses, and updates to techniques, groups, and software across the framework.
1
9
37
5,919
It was recorded, and now slides are being shared, ATT&CKcon 5.0 videos and slides are up!
Dig in to this year's presentations here:
📽️ piped.video/playlist?list=PL…
🛝🛝slideshare.net/MITREATTACK/p…
#attackcon
13
28
6,710
Are you ready for the departure of our TAXII 2.0 server? If you have software or scripts pointed at cti-taxii.mitre.org, it will be no more on Dec 18th.
Learn how to move to our new (and much more alive & working) TAXII 2.1 server at medium.com/mitre-attack/intr….
1
6
17
5,273
Are you using our TAXII 2.0 server to get ATT&CK content? Another reminder that cti-taxii.mitre.org goes away on December 18th.
Check out instructions on how to make the switch in medium.com/mitre-attack/intr… and avoid sad apps and scripts.
13
25
6,277
ATT&CKcon 5.0 is back up and running with day 2 keynote, @CISAgov's Mark Singer. Mark's kicking off the day with some tales of CISA's view of threats. Join us for a packed day of ATT&CK insights at mitre.brandlive.com/ATTACKCo…. #attackcon
2
17
4,587
Here we go! @supremrobertson, this year’s MC, is kicking off ATT&CKcon 5.0. Get ready for two days of hard hitting ATT&CK talks. #attackcon
4
6
4,187
Tomorrow's the day! ATT&CKcon 5.0 starts up at 9am EDT tomorrow morning (10/21). We are completely sold out in person, but there's still time to sign up and join us online at mitre.brandlive.com/ATTACKCo….
See you in the morning! #attackcon
1
6
14
4,999
ATT&CKcon 5.0 starts Tuesday morning! A shoutout to our final set of sponsors @redcanary and @penterasec. They join @safebreach, @socradar, @TidalCyber, @TrendMicro, and The @MITREengenuity CTID in helping us bring you ATT&CKcon.
Virtual reg is open at mitre.brandlive.com/ATTACKCo…
9
25
5,121
In-person registration for ATT&CKcon 5.0 is nearly sold out so we'll be ending sales by this Friday, 10/11. Visit na.eventscloud.com/website/7… for your last chance to join us in McLean, VA 10/22-23.
Virtual reg will continue to remain open at mitre.brandlive.com/ATTACKCo….
7
9
12,165
We're thrilled to announce ATT&CKcon 5.0 keynote speaker, Allie Mellen!
@hackerxbella is a principal analyst at @forrester & has been part of the ATT&CK community for a number of years, including as a speaker for ATT&CKcon Power Hour.
Visit na.eventscloud.com/website/7… to register.
3
2
15
6,204
Virtual registration is open for ATT&CKcon 5.0!
While we'd love to see you in person in McLean, VA October 22-23 (and still have a few tickets left at na.eventscloud.com/website/7…), you can catch talks online for free by registering at mitre.brandlive.com/ATTACKCo…
1
17
35
6,651
It's going to be a busy 🎃👻 for ATT&CK. ATT&CK v16 will be released Oct 31st with new ☁️ platforms, lots more analytics, and fresh techniques/groups/software.
Want a head start? Join us Oct 22-23 for ATT&CKcon. We'll preview v16 changes & much much more na.eventscloud.com/website/7…
13
30
5,744
We're just seven weeks away from ATT&CKcon 5.0 and wanted to give a shoutout to conference sponsors @TidalCyber, @TrendMicro, and The Center for Threat-Informed Defense. Want to join us as we bring together thousands of ATT&CK practitioners in Oct? Visit na.eventscloud.com/website/7…
3
6
3,504
Threat actors gain cover by using popular services like OneDrive especially if the network is already communicating with the service and if security tools already permit traffic going there. This of course goes way beyond OneDrive: Check out attack.mitre.org/techniques/…
1
1
4
3,089
This maps right to T1567.002 attack.mitre.org/techniques/… Taking this route is advantageous for numerous reasons including that the ready-built C2 often looks familiar compared to a threat actor’s primary command and control infrastructure.
1
264
So, APT41 is in a network, they’ve accessed sensitive data, and now they want to exfiltrate. How? Why not just use what the rest of us already use?: APT41 copies data and then smuggles it out via Microsoft OneDrive.
1
189
We’re looking at the recent @Mandiant report on APT41 successfully targeting multiple industries, countries, and regions in a lengthy campaign enabling them to extract sensitive data over an extended period. Phew. cloud.google.com/blog/topics…
1
1
386
The agenda and talk list for ATT&CKcon 5.0 are now live! We're really excited about this year's lineup and hope that you'll join us in October.
To check out this year's talks, get information on sponsorship, or to join us in person, go to na.eventscloud.com/website/7….
6
12
6,836
For the past 6 years our TAXII 2.0 server has tried to serve up current ATT&CK content in STIX. It's time to say farewell.
Sean Sica has written a new blog post introducing our new TAXII 2.1 server and how you can start using it before TAXII 2.0 retires. medium.com/mitre-attack/intr…
1
6
17
4,198
ATT&CKcon is just a little over two months away now (10/22-23) and we're excited to share this year's speaker lineup!
You can check out this year's speakers, register for the conference, or find out more about sponsoring it/getting a booth at na.eventscloud.com/website/7…
8
16
7,719
Still out at Hacker Summer Camp? Come join ATT&CK lead @_whatshisface alongside @KeenanSkelly, @nikhil_mitt @CyberCalyx and @abhijithbr at 11:30 PDT today on #defcon32 Creator Stage 3 for an @AdversaryVillag panel. They’ll be discussing current threats and how to respond.
3
9
3,658
Notifications went out earlier this week to our accepted ATT&CKcon 5.0 talks and we'll be announcing our lineup soon!
Want to join us in-person Oct 22-23 in McLean, VA? Tickets are available at na.eventscloud.com/website/7…, or email us at attackcon@mitre.org about con sponsorship.
1
3
6
3,394
In-person ticket sales for ATT&CKcon 5.0 are now live! Looking to join us in McLean, VA October 22-23? Tickets are $359. Virtual registration opens September 24th.
na.eventscloud.com/website/7…
9
12
8,982
It's been a long time coming, but in-person ATT&CKcon 5.0 tickets go on sale next Tuesday, 7/23, at 10am EDT.
Watch this space for the link to the ticketing system, and price details are at mitre.org/events/attackcon-5. Reg for online attendance will be in the coming months.
2
3
12
4,046
Back at #RSAC, ATT&CK's @_whatshisface and @jamieantisocial sat down with @HuntressLabs's @_JohnHammond and @GregAke to chat about ATT&CK's latest updates and some topics that really shouldn't be so 🌶️ like 100% coverage.
Video's just dropped at
piped.video/watch?v=nroQDMRo…
1
12
3,338
Now is your chance! The ATT&CKcon 5.0 CFP closes tonight at 8pm EDT/0000 UTC. Historically, we'll get half of our submissions today so all you procrastinators are in good company.
We're game to consider anything related to ATT&CK, shoot your shot at openconf.org/attackcon2024/.
3
5
3,373
We're coming up on the final countdown for the ATT&CKcon 5.0 CFP!
If you're sitting on the fence, take the leap, we're interested in hearing from all walks of (cyber) life.
CFP and submission system are at openconf.org/attackcon2024/o…… and will automatically close at 6PM ET Wed.
1
3
6
3,956
The clock is running out on the ATT&CKcon 5.0 CFP. We'd love to feature your talk from our McLean, VA stage this October, but need you to submit to openconf.org/attackcon2024/o… before the clock strikes 6pm ET next Wednesday (6/26).
Don't let time get away from you!
10
14
7,156