Understanding Adversaries via Threat-Informed Defense | Mike Cunningham, MITRE R&D Program Manager

In this episode, SquareX field CISO John Carse speaks with Mike Cunningham, R&D Program Manager at MITRE's Center for Threat-Informed Defense. Mike brings his unique background from the Navy and NSA to discuss how organizations can better defend against cyber threats by understanding adversary behaviors, browser security challenges and more. If you ever wanted to know more about MITRE, its ATT&CK framework and the good work they do — this is an episode you won’t want to miss.

0:00 Introduction and Mike's cybersecurity journey
5:33 The MITRE ATT&CK framework and threat-informed defense
15:01 On the threatscape, social engineering vs. infrastructure vulnerabilities
20:49 Browser (extensions) and SaaS app security challenges
27:36 On patch management and security trends
34:53 Common mistakes in organizational security approaches
38:24 The Center for Threat-Informed Defense’s research on AI
42:09 Closing remarks and what people don't know about MITRE

🔔 Follow Mike and John on:
https://www.linkedin.com/in/mticunningham/
https://www.linkedin.com/in/johncarse/

🔥 Powered by SquareX
SquareX helps organizations detect, mitigate, and threat hunt web attacks happening against their users in real-time. Find out more about SquareX at https://sqrx.com/

Chapters

• 0:00 Introduction and Mike's cybersecurity journey
• 5:33 The MITRE ATT&CK framework and threat-informed defense
• 15:01 On the threatscape, social engineering vs. infrastructure vulnerabilities
• 20:49 Browser (extensions) and SaaS app security challenges
• 27:36 On patch management and security trends
• 34:53 Common mistakes in organizational security approaches
• 38:24 The Center for Threat-Informed Defense’s research on AI
• 42:09 Closing remarks and what people don't know about MITRE