Major Cybersecurity Vendors Exit MITRE Evaluations Test, Raising Questions
Infosecurity Magazine
|
Contributed by: Drex DeFord
Summary
Three major cybersecurity vendors—Microsoft, SentinelOne, and Palo Alto Networks—have withdrawn from the 2025 MITRE Engenuity ATT&CK Evaluations, raising concerns about the program's future impact and credibility. This decision, particularly notable for Microsoft, which previously leveraged its participation as a marketing point, reflects a potential shift in the industry's perception of such evaluations as primarily promotional rather than genuinely improving security efficacy. As the ATT&CK framework continues to evolve since its inception in 2015, MITRE's CTO expressed that the changing nature of the tests should not be viewed as a consistent benchmark. For healthcare professionals, this development signals a critical juncture in assessing cybersecurity product reliability and could influence the adoption strategies for endpoint detection and response solutions.