Understanding and managing threats is crucial, and normative documents provide the frameworks and guidance necessary to identify, categorize, and respond to them systematically. Standards like ISO/IEC 27005 and guidance from NIST SP 800-30 outline methodologies for threat analysis and risk evaluation, while regulators such as ENISA in Europe and CISA in the U.S. publish threat reports and advisories that inform organizations of emerging risks. Laws and regulations, including the EU NIS2 Directive, often require organizations to assess threat landscapes and implement mitigations. By aligning with these normative documents, organizations can proactively anticipate cyber threats, prioritize defenses, and maintain compliance with national and international security expectations.
The “Top Threats to Cloud Computing 2025” report highlights a rapidly evolving threat landscape driven by both technological advances and persistent human factors. Key risks include data breaches, often resulting… Read More »CSA Top Threats to Cloud Computing 2025
MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems) is a comprehensive, publicly available knowledge base and framework that documents the tactics, techniques, and case studies of adversarial attacks targeting artificial… Read More »MITRE ATLAS version 4.8.0
The ANSSI Cyber Threat Overview provides a comprehensive analysis of the prevailing cyber threats, focusing on the motivations, capabilities, and methods of attackers targeting critical information systems and the broader… Read More »ANSSI Cyber threat overview 2024 (in 2025)
The “Ransomware Risk Management: A Cybersecurity Framework 2.0 Community Profile” is a NIST publication that provides organizations with a practical guide to managing ransomware risks using the updated NIST Cybersecurity… Read More »NIST IR 8374 Rev. 1 Ransomware Risk Management: A Cybersecurity Framework 2.0 Community Profile
The MITRE ATT&CK® framework is a globally recognized, continuously updated knowledge base that catalogs the tactics, techniques, and procedures (TTPs) used by cyber adversaries, based on real-world observations. Organized as a… Read More »MITRE Att&Ck® version 16.1
The Cloud Security Alliance’s (CSA) Cloud Adversarial Vectors, Exploits, and Threats (CAVEaT™) is an emerging, cloud-centric threat matrix designed to address the unique and rapidly evolving security risks in cloud… Read More »CSA Cloud Adversarial Vectors, Exploits, and Threats (CAVEaT™): An Emerging Threat Matrix for Industry Collaboration
The MITRE Common Attack Pattern Enumeration and Classification (CAPEC) is a publicly available, comprehensive catalog that documents and categorizes common attack patterns used by adversaries to exploit software and systems.… Read More »MITRE CAPEC – Common Attack Pattern Enumeration and Classification Version 3.9