Microsoft releases Cloud Web App Threat Matrix (ATT&CK-aligned)

Thu, 10 Sep 2026 14:58:06 +0000

Engineer — Learn: A new ATT&CK-aligned taxonomy for cloud web app and serverless threats is worth reviewing to identify gaps in your current threat models and security controls, but requires no immediate system changes.
SOC/IR — Learn: Review the matrix to identify coverage gaps in existing detections for cloud web app attack techniques, and consider mapping current Sigma/KQL rules to the new framework over time.
Leader — Skip

Threat-Modeling on CuraSec