The premier gathering for threat-informed defense nerds returned October 14-15, 2025, in McLean, VA. MITRE ATT&CKcon 6.0 brought the cyber community together for talks on the ATT&CK framework, lightning talks, and a keynote. All of it is now on demand, because nothing says “I love adversarial behavior modeling” quite like traveling to Virginia, or at least watching people who did. The agenda ranged from clustering ClickFix campaigns and defending ESXi to detections for Scattered Spider, next to MITRE’s own updates on Enterprise and defensive ATT&CK. ATT&CK v18 followed on October 28, deprecating data sources in favor of detection strategies and analytics.
