News
Findings From The Tidal Cyber 2025 Threat-Led Defense Report
1+ hour, 59+ min ago (1022+ words) The central idea of this report is to help CISOs reimagine their defensive posture. The reality of threats in 2026 demands that industry security experts move from reacting to Common Vulnerabilities and Exposures (CVEs) as they emerge to a method where…...
Metrics Every CISO Needs for Threat-Led Defense Success
3+ mon, 6+ day ago (1007+ words) Security leaders are under increasing pressure to prove that their defenses actually work. Board members and stakeholders want to see measurable progress, yet most metrics available to CISOs today don't quite fit that need." Reporting on tool uptime, alert volumes,…...
How Detection Engineers Can Turn Procedures into Actionable Coverage
3+ mon, 1+ week ago (790+ words) Detection teams rely on the MITRE ATT&CK framework as a common language for describing TTPs, but its scope is intentionally broad. When viewed through the discipline of Threat-Led Defense, ATT&CK becomes more actionable helping teams focus on the…...
Tidal Cyber Launches NARC: The First Automated AI Engine to Extract Adversary Procedures for Threat-Led Defense
3+ mon, 2+ week ago (649+ words) Tidal Cyber is proud to announce the release of NARC AI (Natural Attack Reading and Comprehension), the first AI engine purpose-built to automatically extract adversary procedures and MITRE ATT&CK-aligned threat intelligence from unstructured reporting. With NARC AI, you can…...
Threat-Led Defense Starts with Procedures, Not Techniques
4+ mon, 1+ week ago (560+ words) Your Threat-Led Defense platform shows comprehensive ATT&CK coverage. Your last assessment confirmed that your detections align to adversary techniques across multiple attack stages. Yet somehow, a breach still occurs using the very techniques you thought your defenses could stop....
Why Threat-Led Defense & Adversary Behavior Are Driving Security Priorities
4+ mon, 2+ week ago (907+ words) Security teams used to set priorities based on vulnerabilities and assets. They would monitor CVE feeds, build patch schedules, and measure success by the number of exposures closed. This work is vital to operational security, but it doesn't always align…...
Adversary TTPs are Rapidly Evolving: What It Means for Your SOC
5+ mon, 1+ day ago (527+ words) In December 2024, we warned against the rapid evolution of adversary tactics, techniques, and procedures (TTPs) in 2025. Our predictions have come true, as cybercriminals leverage millions of dollars in profits to develop new malware technologies and support them with increasingly sophisticated…...
Accelerating Threat-Led Defense with Tidal Cyber + ThreatConnect
6+ mon, 3+ day ago (496+ words) Tidal Cyber's knowledge base is highly extensible and designed to enable a multi-source view of adversaries and, importantly, their TTPs " specifically TTPs normalized to the standardized taxonomy of Tactics, Techniques, and Sub-Techniques published by MITRE ATT&CK. This gives users…...
How Tidal Cyber Helps CISOs Justify Their Defensive Investments
7+ mon, 2+ week ago (400+ words) CISOs are now strategic partners in business performance, charged with translating security outcomes into business value that non-technical people can understand. Being able to measure and quantify the effectiveness of defenses in terms of business value is what justifies an…...
Doing the Heavy Lifting: MITRE ATT&CK v17 Updates in Tidal Cyber
9+ mon, 3+ week ago (660+ words) We are excited to announce that the Tidal Cyber Enterprise and Community Editions are now on the new v17 version of MITRE ATT&CK. Doing the Heavy Lifting: MITRE ATT&CK v17 Updates in Tidal Cyber We are excited to announce that…...