Microsoft and CrowdStrike Launch Shared Threat Actor Glossary to Cut Attribution Confusion

Microsoft and CrowdStrike are collaborating to create a unified threat actor mapping to improve cybersecurity analysis and response. This joint effort aims to deconflict and better understand overlapping threat actor aliases, enhancing global threat attribution. #Nobelium #FightingUrsa

Keypoints

Microsoft and CrowdStrike are partnering to align threat actor taxonomies.
The initiative reduces confusion caused by varying threat actor nicknames used by different vendors.
Examples include the Russian threat actors Midnight Blizzard (APT29) and Forest Blizzard (Sofacy).
The collaboration involves contributions from Google, Mandiant, Palo Alto Networks, and other future partners.
They aim to improve threat attribution by creating a “Rosetta Stone” for threat actor aliases, without a single naming standard.