@AttackIQ

Continuous Threat Exposure Management Platform

 Santa Clara, CA
attackiq.com
Joined August 2013
  • Tweets4.1K
  • Following73
  • Followers7.1K
2.4KMedia
CVE-2026-109618 and CVE-2026-109619 let attackers run code on affected PHP systems without logging in. Patch them immediately. Then use our PHP2Shell Check to confirm which hosts still return the vulnerable error signature. Patched means verified. 👉 attackiq.com/2026/10/22/php2…
136
Your backups are a SafePay target. So are your shadow copies, credentials, and your data before it leaves. Encryption is the last step, and every step before it is a chance to detect them. 👉CISA published the SafePay TTPs. Run them against your controls: attackiq.com/2026/10/21/resp…
A futuristic figure wearing a dark, armored suit stands holding a large, glowing scythe. The background is a cityscape with neon lights. Text includes "AttackIQ," "Threat Research," and "#StopRansomware: SafePay Ransomware." Names listed are Ayelen Tenorio and Advisory Research Engineer.

ALT A futuristic figure wearing a dark, armored suit stands holding a large, glowing scythe. The background is a cityscape with neon lights. Text includes "AttackIQ," "Threat Research," and "#StopRansomware: SafePay Ransomware." Names listed are Ayelen Tenorio and Advisory Research Engineer.

94
Would your controls flag a legitimate VPN client renamed to look like a Windows executable? Chinese government-linked actors use that for persistence in CISA advisory AA26-281A. Our emulation, built from available advisory samples, tests your controls: attackiq.com/2026/10/15/resp…
121
The attacker’s retest cycle runs in hours. Yours runs on a calendar invite. See how to retest a fix the moment it’s deployed and turn a missed detection into a validated one in the same session. Join us on Oct 15, 10 AM PT / 1 PM ET. 👉Register now: attackiq.com/resources/webin…
Webinar advertisement for AttackIQ titled "How Purple Teaming Closes the Red-to-Blue Loop" with the subtitle "Purple. Red. Blue. One Continuous Defense." Includes a portrait labeled Jim Mason, Senior Sales Engineer at AttackIQ. The event is scheduled for Thursday, October 15, at 10 AM PT / 1 PM ET. There is a "Register Now" button.

ALT Webinar advertisement for AttackIQ titled "How Purple Teaming Closes the Red-to-Blue Loop" with the subtitle "Purple. Red. Blue. One Continuous Defense." Includes a portrait labeled Jim Mason, Senior Sales Engineer at AttackIQ. The event is scheduled for Thursday, October 15, at 10 AM PT / 1 PM ET. There is a "Register Now" button.

87
CISA retired CVSS-based remediation deadlines on June 10. BOD 26-04 sets them by exposure, KEV status, automatability, and adversary control. The better question: what does an exploit give the adversary in your environment? Read the blog to find out: attackiq.com/2026/10/13/cisa…
A large purple chess king piece stands prominently on the right side of a blurred chessboard. On the left, the text reads: "CISA BOD 26-04: Adversary Opportunity Drives Vulnerability Prioritization Across the Federal Government." Below are buttons labeled "CISA," "BOD," "CTEM," and "Vulnerability Prioritization." The AttackIQ logo is in the top left corner.

ALT A large purple chess king piece stands prominently on the right side of a blurred chessboard. On the left, the text reads: "CISA BOD 26-04: Adversary Opportunity Drives Vulnerability Prioritization Across the Federal Government." Below are buttons labeled "CISA," "BOD," "CTEM," and "Vulnerability Prioritization." The AttackIQ logo is in the top left corner.

1
1
112
If someone logged into your AWS console without MFA today, who would find out? Our new AWS Identity & Data Protection Assessment runs 14 scenarios, from hidden admin users to S3 files deleted in a single call. 👉 See what your monitoring catches: attackiq.com/2026/10/07/aws-…
A digital-themed image with a futuristic key and circular lock. Text reads, "Small Oversights, Big Consequences: Validating AWS Identity and Data Protection." Additional text: "Gerardo Schrott, Adversary Research Engineer," and "AttackIQ Threat Research.

ALT A digital-themed image with a futuristic key and circular lock. Text reads, "Small Oversights, Big Consequences: Validating AWS Identity and Data Protection." Additional text: "Gerardo Schrott, Adversary Research Engineer," and "AttackIQ Threat Research.

1
97
18 years at DISA. More than 12 as CTO, leading engineering for the agency’s IT and cybersecurity mission and representing DISA across Defense and Intelligence. Now, David Mihelcic is AttackIQ’s Field CTO – Federal. Read Dave's take: attackiq.com/2026/09/22/why-…
1
154
AI gives attackers faster access to techniques we already know, not new ones. Verizon's DBIR: median attacker used ~15 known ATT&CK techniques. Under 2.5% were rare. Learn why defense should target chokepoints, not procedures. forbes.com/councils/forbeste… @ForbesTechCncl
128
A patched vulnerability and a proven defense aren't the same thing. AttackIQ tests controls against adversary behavior, then revalidates after every fix. That evidence now flows into Falcon Next-Gen SIEM through @CrowdStrike Project QuiltWorks. Read how: attackiq.com/2026/09/01/crow…
1
160
Your team already works in ChatGPT, Claude, Cursor, and Copilot. AVA Agentic OS runs CTEM missions from there, start to finish, and returns validated defenses, working detections, and measurable threat debt reduction. See it live at Fal.Con, booth #2305.
1
143
Our most-taken course just got rebuilt for MITRE ATT&CK v19. Foundations of Operationalizing MITRE ATT&CK: turn ATT&CK from a reference chart into a working system for prioritizing threats, building detections, and proving they hold up. Enroll: academy.attackiq.com/courses…
172
Nobody approves threat debt. It accrues from configuration drift, identity sprawl, and stale controls, then compounds into viable attack paths to assets you can't lose. Here's how to measure it and pay it down: attackiq.com/2026/08/11/thre…
1
185
DISA selected AttackIQ as DoW's enterprise AEV platform. Alongside it comes AVA Agentic OS & Watchtower. Together they put AI to work prioritizing threats and validating defenses across every Military Service, Command, and Defense Agency. Get the update: attackiq.com/resources/press…
1
216
Before ransomware encrypts a single file, it dismantles your defenses. Our research traces Nova ransomware's Microsoft Defender evasion, security tool takedowns, and shadow copy deletion—plus the AttackIQ emulation that validates these TTPs. 🔬 Details: attackiq.com/2026/07/31/anal…
2
209
AI-driven attacks are getting faster. Cyber defense needs to keep pace. AVA Agentic OS helps security teams operationalize #CTEM through autonomous cybersecurity missions. Proud to continue working with @Accenture to help orgs defend at the speed of AI. attackiq.com/resources/press…
2
192
Threats now move at machine speed. Defense finally does too. Introducing AVA Agentic OS—the first agentic operating system for CTEM. The future of cyber defense isn't more alerts or more dashboards. It's autonomous cybersecurity missions. See why → attackiq.com/2026/07/30/intr…
1
141
An AI model was told to solve an evaluation. It inferred the answer key existed elsewhere, reasoned past the sandbox built to contain it, and reached Hugging Face's production infrastructure. Scary. Here's 6 priorities to help prepare your AI agents. 👉 attackiq.com/2026/07/23/the-…
2
156
Your AI systems are already part of the attack surface. MITRE ATLAS maps how adversaries target the models, data, and pipelines behind them, using real-world research. Join AttackIQ, MITRE CTID, Fujitsu, Ensign InfoSecurity & Fortinet July 16. Register: attackiq.com/resources/webin…
3
4
141
10,000+ critical/high severity vulnerabilities surfaced in a month across 50 orgs using the same AI tool. Finding flaws stopped being the hard part. The number worth watching now is threat debt: adversary opportunity in your environment. 📖 attackiq.com/2026/07/08/find…
125
"How do I apply CTEM?" "How do I get ahead of threat debt?" "How do I get an AttackIQ shirt?" All valid questions, all answered at Booth 1957, Black Hat 2026, Aug 4-6 at Mandalay Bay. Live demos, a Superfrico dinner, and yes, shirts. Book a meeting: attackiq.com/lp/black-hat-20…
1
1
167
Load more