Abstract:Taking into account the process of complication of the geopolitical and geoeconomic landscape space, the development of information technologies and the formation of new security challenges associated with the emergence of new cyber threats, there is a need for constant monitoring and forecasting of them in order to prevent consequences in the form of damage and leakage of valuable and confidential information. The authors analyzed the new predictable cyber security threats to organizations, with special attention paid to the protection of endpoints. Threats identified in the field of artificial intelligence development (underground development of malicious Large Language Models (LLM); “Script Kiddies” update; voice fraud for social engineering, which is created by artificial intelligence); changing trends in the behavior of threat actors (attacks on supply chains against managed file transfer solutions, malware threats that are becoming multilingual); as new emerging threats and attack methods (growing QR code rivalry; stealth attacks on peripheral devices; Python implementation in Excel creating a potentially new vector for attacks; LOL drivers changing action algorithms). The resulting detection of future threats emphasizes the need for strategic planning for the adoption of new technologies and platforms: such as Endpoint Detection and Response (EDR) capabilities, as well as the use of EDR as part of a multi-instrumented enhanced detection and response (XDR) architecture. Gartner’s research has been proven to have a tremendous impact on improving organizations’ threat detection capabilities by providing valuable insight into the strengths and weaknesses of each cybersecurity service provider with respect to emerging threat intelligence, by focusing organizations’ attention on opportunities to identify gaps in their existing security infrastructure and adopt sound decisions to invest in additional solutions or services that effectively address these gaps. The spheres of activity of the world’s leading companies were analyzed, their connection with Ukrainian companies was found, and further cooperation was proposed for the effective protection of national cyberspace.

Using cyber threat intelligence to support adversary understanding applied to the Russia-Ukraine conflict

Investigating co-occurrences of MITRE ATT\&CK Techniques

MITRE ATT&CK: State of the Art and Way Forward

Attackers reveal their arsenal: An investigation of adversarial techniques in CTI reports

Threat Actor Type Inference and Characterization within Cyber Threat Intelligence

The bitskrieg that was and wasn’t: the military and intelligence implications of cyber operations during Russia’s war on Ukraine

How hard can it be? Quantifying MITRE attack campaigns with attack trees and cATM logic

Cyberthreat-Intelligence Information Sharing: Enhancing Collaborative Security.

Integration of Cyber Threat Intelligence into Security Onion and Malcolm for the use case of industrial networks

Assessing MITRE ATT&CK Risk Using a Cyber-Security Culture Framework

Enabling Efficient Cyber Threat Hunting with Cyber Threat Intelligence

A Threat Hunting Framework for Industrial Control Systems

Automated discovery and mapping ATT&CK tactics and techniques for unstructured cyber threat intelligence

Linking Threat Tactics, Techniques, and Patterns with Defensive Weaknesses, Vulnerabilities and Affected Platform Configurations for Cyber Hunting

A Cyber Threat Intelligence Management Platform for Industrial Environments

The Russia-Ukraine War: An Exploratory Study into the Potential Impact of Cyber Warfare on Asymmetric War Efforts

ANALYSIS OF CURRENT THREATS TO THE INFORMATION SECURITY OF ORGANIZATIONSAND THE FORMATION OF THE INFORMATION PLATFORM AGAINST THEM

Cyberattack Models for Ship Equipment Based on the MITRE ATT&CK Framework

What are the attackers doing now? Automating cyber threat intelligence extraction from text on pace with the changing threat landscape: A survey

Automated Retrieval of ATT&CK Tactics and Techniques for Cyber Threat Reports