MITRE Launches New Security Framework for Embedded Systems

MITRE has launched the Embedded Systems Threat Matrix (ESTM), a cybersecurity framework designed to help organisations protect critical embedded systems, according to MITRE on its website. Built to mirror the ATT&CK approach, ESTM categorises attack tactics and techniques tailored to hardware and firmware environments and maps both established and emerging attack vectors to aid threat modelling and vulnerability identification in embedded architectures.

The framework, which MITRE says can be used in industries such as energy, robotics, industrial controls, transportation, and healthcare, has evolved to ESTM 3.0 in its mature form. MITRE notes that ESTM works with the EMB3D Threat Model and hopes the cybersecurity community will contribute to the project. The announcement was made on 21 January 2026, with the ESTM project described as significantly enhanced since its first iteration.