MITRE Posts Results of 2025 ATT&CK Enterprise Evaluations

Keypoints

• Eleven cybersecurity companies participated in the 2025 MITRE ATT&CK Evaluations.
• The assessments tested defenses against scenarios inspired by Scattered Spider and Mustang Panda.
• This year’s evaluation introduced testing for cloud infrastructure attack detection and reconnaissance capabilities.
• MITRE emphasized real-time threat blocking and high-fidelity alert detection to reduce alert fatigue.
• Major companies like Microsoft and Palo Alto Networks withdrew due to resource commitments required for participation.