Cybersecurity Showdown: MITRE’s 2025 ATT&CK Evaluations Reveal the Good, the Bad, and the Boastful
The results of the 2025 ATT&CK Evaluations are out, and cybersecurity companies are buzzing. MITRE tested solutions against scenarios inspired by Scattered Spider and Mustang Panda, even throwing cloud infrastructure into the mix. Eleven companies participated, though some big names skipped this year, citing the evaluations as a resource-intensive endeavor.

Hot Take:
Oh, MITRE! Once again, you’ve managed to turn cybersecurity evaluations into a game of “who can flex harder without pulling a muscle?” While some companies are busy chest-thumping about their “100% detection rates,” others are secretly nursing their bruised egos in the corner. It’s like watching a beauty pageant, but instead of evening gowns, it’s all about who can stop the most hackers. And let’s not even start on the drama of who showed up and who decided to ghost the event this year. It’s a cyber soap opera, folks!
Key Points:
- Eleven companies participated in the 2025 MITRE ATT&CK Evaluations.
- Scenarios were inspired by cybercrime group Scattered Spider and Chinese threat actor Mustang Panda.
- This year marked the first cloud infrastructure assessment and adversary reconnaissance testing.
- MITRE emphasized protection and high-fidelity alerts to reduce alert fatigue.
- Major players like Microsoft and Palo Alto Networks withdrew from this year’s evaluations.
