The 2026 EU MITRE ATT&CK® Community Workshop took place last week and I've had a chance to contribute to it with a presentations introducing a project run by the Ministry of Industry and Trade of the Czech Republic, under which free ATT&CK-based threat models are provided to Czech organizations. If you would like to take a look at the slides from the workshop, they are now available for download...

To slightly paraphrase Peter Drucker’s famous quote, one can’t manage what one can’t measure. This – of course – holds true even for Computer Security Incident Response Teams (CSIRTs) and Security Operations Centers (SOCs). The only question is, how can we “measure” what they do in a meaningful way? This is what we will discuss in this article...

A new Diary of mine was published today on the SANS Internet Storm Center website. In this one, we’ll take a look at a new version of the MITRE ATT&CK framework, which was published this week…