Summary

Above Security and Forscie launched the Synthetic Insider Threat Matrix, an open taxonomy modelled on MITRE ATT&CK. Its 166 knowledge objects cover behaviours including unauthorised data access, autonomous exfiltration, privilege misuse and shadow AI activity.

Why it matters

A shared vocabulary can help security teams design detections, red-team exercises and controls for autonomous software identities that do not fit traditional insider-threat models.

Sources