Microsoft and CrowdStrike collaborate on shared threat actor mapping system

CrowdStrike Holdings Inc. and Microsoft Corp. today announced a strategic collaboration aimed at resolving the longstanding confusion in how cyberthreat actors are identified and tracked across security platforms.

The partnership establishes a shared mapping system that aligns adversary attribution across both companies’ threat intelligence ecosystems, eliminating ambiguity caused by inconsistent naming.

The problem that both companies are trying to solve is one encountered commonly in cybersecurity news: various companies applying their own name to threat actors, making it sometimes difficult for observers to know what threat actor and ransomware group one report to another is talking about. For example, the well-known Cozy Bear hacking group is also known as Midnight Blizzard, depending on which company is writing the report, which doesn’t exactly make intelligence tracking easy when different names are used.

To their credit, CrowdStrike and Microsoft can see the problem and have developed a “Rosetta Stone” for cyber threat intelligence, one that links adversary identifiers across vendor ecosystems without mandating a single naming standard. The idea is that by reducing ambiguity in how adversaries are labeled, the mapping enables defenders to make faster, more confident decisions, correlate threat intelligence across sources and better disrupt threat actor activity before it causes harm.

“This is a watershed moment for cybersecurity. Adversaries hide behind both technology and the confusion created by inconsistent naming,” Adam Meyers, head of Counter Adversary Operations at CrowdStrike, said in a media release. “As defenders, it’s our job to stay ahead and to give security teams clarity on who is targeting them and how to respond.”

The collaboration will start with a shared analyst-led effort to harmonize adversary naming between CrowdStrike and Microsoft’s threat research teams. Although only announced today, the companies have already “deconflicted” more than 80 adversaries, including validating threat actors like Microsoft’s Volt Typhoon and CrowdStrike’s VANGUARD PANDA are allegedly Chinese state-sponsored threat actors and that Secret Blizzard and VENOMOUS BEAR refer to the same Russia-nexus adversary.

Moving forward, CrowdStrike and Microsoft plan to continue working together to expand this effort, inviting other partners to contribute to and maintain a shared threat actor mapping resource for the global cybersecurity community.

“Cybersecurity is a defining challenge of our time, especially in today’s AI-driven era,” said Vasu Jakkal, corporate vice president of Microsoft Security. “Microsoft and CrowdStrike are in ideal positions to help our customers and the wider defender community accelerate the benefits of actionable threat intelligence. Security is a team sport and when defenders can share and react to information faster it makes a difference in how we protect the world.”

Image: SiliconANGLE/Reve

Enjoy the perfect blend of retro charm and modern convenience with the Udreamer Vinyl Record Player. With 9,041 ratings, a 4.3/5-star average, and 400+ units sold in the past month, this player is a fan favorite, available now for just $39.99.

The record player features built-in stereo speakers that deliver retro-style sound while also offering modern functionality. Pair it with your phone via Bluetooth to wirelessly listen to your favorite tracks. Udreamer also provides 24-hour one-on-one service for customer support, ensuring your satisfaction.

Don’t miss out—get yours today for only $39.99 at Amazon!

Help Power Techcratic’s Future – Scan To Support

If Techcratic’s content and insights have helped you, consider giving back by supporting the platform with crypto. Every contribution makes a difference, whether it’s for high-quality content, server maintenance, or future updates. Techcratic is constantly evolving, and your support helps drive that progress.

As a solo operator who wears all the hats, creating content, managing the tech, and running the site, your support allows me to stay focused on delivering valuable resources. Your support keeps everything running smoothly and enables me to continue creating the content you love. I’m deeply grateful for your support, it truly means the world to me! Thank you!