MITRE Posts Results of 2025 ATT&CK Enterprise Evaluations

According to MITRE, MITRE has published the results of the 2025 ATT&CK Evaluations for enterprise cybersecurity solutions, with eleven companies taking part: Acronis, AhnLab, CrowdStrike, Cyberani, Cybereason, Cynet, ESET, Sophos, Trend Micro, WatchGuard, and WithSecure, in what was described as independent assessments of product effectiveness against real-world attack scenarios.

This year’s evaluations focused on two scenarios—one inspired by the cybercrime group Scattered Spider and another by the Chinese state-sponsored actor Mustang Panda—and marked the first time the Scattered Spider scenario tested cloud infrastructure and the first testing of reconnaissance detection. Several participating firms highlighted 100% detection and protection rates within specific evaluation categories, though veteran guidance from observers urged caution about vendor claims.

Major vendors such as Microsoft, Palo Alto Networks and SentinelOne withdrew from the evaluations, citing the resource-intensive nature of participation. The results are available on the MITRE website, and SecurityWeek notes that MITRE emphasises the evaluations do not rank vendors but provide objective, evidence-based results to help organisations choose solutions.

This story, published on 11 December 2025, includes commentary about the evolving evaluation framework and its emphasis on protection and actionable alerting to reduce alert fatigue.