[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:threat-intelligence":3},{"control":4,"products":25,"stories":79,"lessons":123,"related":148,"compare":177},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.","Timely, relevant information about attackers and what they are doing: which vulnerabilities are being exploited, which groups target your industry, and the indicators (IP addresses, domains, file hashes) to block and hunt for. Good intelligence is filtered to what matters to you and delivered into the tools that act on it, not as a pile of reports.","Knowing that a flaw in your VPN is being exploited this week, or that a ransomware group has started targeting your sector, changes what you patch first and what you watch for. Intelligence shortens the time between an attack appearing anywhere and your defences being ready for it, and it gives the board context for risk decisions. The common failure is buying feeds nobody acts on, so judge it by the decisions it changes.",[11,12,13,14],"Where does the intelligence come from: your own collection and sensors, partners or open sources? How is it verified?","Can it be filtered to our sector, technology, suppliers and brand?","How does it reach our SIEM, EDR and firewalls, and how are outdated indicators retired?","Can you show cases where your intelligence came before the public advisory?","Risk: defences and patching priorities that lag behind active attack campaigns. Control: threat intelligence filtered to our sector and technology, built into detection and vulnerability prioritisation. Owner: security operations lead. Measure: share of actively exploited vulnerabilities in our estate fixed or mitigated within the target time.",[17,18,19,20],"ISO\u002FIEC 27001:2022 A.5.7: threat intelligence","NIS2 Art. 29: cybersecurity information-sharing arrangements","DORA Art. 45: sharing of cyber threat information and intelligence","NIST CSF 2.0 ID.RA-02: cyber threat intelligence is received",{"name":22,"slug":23},"Logging & Monitoring","logging-monitoring","2026-10-16T16:05:05.104475+00:00",[26,34,42,47,55,63,71],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","agentic-threat-intelligence-platform","Agentic Threat Intelligence Platform","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fagentic-threat-intelligence-platform\u002F","Threat intelligence platform, formerly ThreatConnect TI Ops, that collects, scores and structures intelligence and pushes it into security tools.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":43,"product_name":44,"url":45,"description":46},"dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",{"vendor_slug":48,"vendor_name":49,"vendor_logo":50,"product_slug":51,"product_name":52,"url":53,"description":54},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"total":80,"last_days":81,"recent":82},465,457,[83,88,93,98,103,108,113,118],{"slug":84,"title":85,"published_at":86,"brief":87},"drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon-978985","Drupal patches critical RCE flaws, warns exploits may emerge soon","2026-10-17T14:32:48+00:00","Drupal patches two critical RCE vulnerabilities in Field UI and Entity List modules.",{"slug":89,"title":90,"published_at":91,"brief":92},"malfex-npm-package-imgdecode-hides-shellcode-loader-in-windows-native-addon-219fd9","MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon","2026-10-17T11:11:56+00:00","Malicious npm package 'imgdecode' hides shellcode loader in Windows native addon.",{"slug":94,"title":95,"published_at":96,"brief":97},"beyondtrust-remote-support-zero-day-continues-trend-of-exploited-edge-bugs-92a3ec","BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs","2026-10-16T20:34:37+00:00","BeyondTrust Remote Support zero-day vulnerability is being actively exploited.",{"slug":99,"title":100,"published_at":101,"brief":102},"critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers-eef67d","Critical BlockStrap flaw lets hackers run code on Magento servers","2026-10-16T20:00:59+00:00","Critical BlockStrap flaw in Magento and Adobe Commerce allows arbitrary code execution.",{"slug":104,"title":105,"published_at":106,"brief":107},"zero-click-attacks-used-targeted-ads-to-deliver-candiru-spyware-f10c7f","Zero-click attacks used targeted ads to deliver Candiru spyware","2026-10-16T17:20:03+00:00","Candiru spyware delivered via zero-click ads targeting Al Jazeera Media Network.",{"slug":109,"title":110,"published_at":111,"brief":112},"prolific-chinese-espionage-group-exploits-beyondtrust-zero-day-e8d3d8","Prolific Chinese espionage group exploits BeyondTrust zero-day","2026-10-16T17:09:09+00:00","Chinese espionage group Armory Castle exploits BeyondTrust zero-day.",{"slug":114,"title":115,"published_at":116,"brief":117},"f5-juniper-networks-patch-critical-vulnerabilities-e13b54","F5, Juniper Networks Patch Critical Vulnerabilities","2026-10-16T09:54:34+00:00","F5 and Juniper Networks release patches for dozens of critical vulnerabilities.",{"slug":119,"title":120,"published_at":121,"brief":122},"the-next-election-influence-campaign-will-target-your-ai-chatbot-eda445","The next election influence campaign will target your AI chatbot","2026-10-15T19:29:58+00:00","Influence campaign seeds internet with hyperlocal content to train AI chatbots favoring specific candidates.",[124,128,132,136,140,144],{"slug":125,"title":126,"published_at":127},"critical-drupal-rce-flaws-demand-immediate-patching","Critical Drupal RCE Flaws Demand Immediate Patching","2026-10-17T16:20:34.593+00:00",{"slug":129,"title":130,"published_at":131},"malicious-npm-package-imgdecode-delivers-hidden-shellcode-loader","Malicious npm Package 'imgdecode' Delivers Hidden Shellcode Loader","2026-10-17T12:20:17.17+00:00",{"slug":133,"title":134,"published_at":135},"beyondtrust-zero-day-highlights-critical-risk-of-unpatched-edge-devices","BeyondTrust Zero-Day Highlights Critical Risk of Unpatched Edge Devices","2026-10-16T22:20:18.59+00:00",{"slug":137,"title":138,"published_at":139},"chinese-espionage-group-exploits-beyondtrust-zero-day-in-remote-support-tool","Chinese Espionage Group Exploits BeyondTrust Zero-Day in Remote Support Tool","2026-10-16T18:20:52.789+00:00",{"slug":141,"title":142,"published_at":143},"zero-click-ad-spyware-bypasses-user-interaction-to-compromise-devices","Zero-Click Ad Spyware Bypasses User Interaction to Compromise Devices","2026-10-16T18:20:36.559+00:00",{"slug":145,"title":146,"published_at":147},"ai-powered-oss-scanner-fast-tracks-vulnerability-disclosure-for-open-source-maintainers","AI-Powered OSS Scanner Fast-Tracks Vulnerability Disclosure for Open Source Maintainers","2026-10-15T20:21:23.114+00:00",[149,153,157,161,165,169,173],{"slug":150,"name":151,"problem":152},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":154,"name":155,"problem":156},"log-management","Log management and security data pipelines","Security logs are so expensive to collect and keep that teams drop the ones they need when an incident happens.",{"slug":158,"name":159,"problem":160},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",{"slug":162,"name":163,"problem":164},"soc-automation","SOC automation and AI analysts","Alerts arrive faster than the team can investigate them, so real attacks wait in the queue or are closed unread.",{"slug":166,"name":167,"problem":168},"managed-detection-response","Managed detection and response (MDR)","A team watches and responds around the clock when you cannot.",{"slug":170,"name":171,"problem":172},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",{"slug":174,"name":175,"problem":176},"deception","Deception and honeypots","An attacker who gets in quietly can explore the network for weeks before any alarm goes off.",{"dataminr\u002Fagentic-threat-intelligence-platform":178,"crowdstrike\u002Ffalcon-adversary-intelligence":189,"google\u002Fgoogle-threat-intelligence":206,"dataminr\u002Fdataminr-threat-intelligence":223,"recorded-future\u002Frecorded-future-cyber-operations":228,"reliaquest\u002Fgreymatter-digital-risk-protection":238,"defused\u002Fdefused-tf":245},{"hq_country":179,"also_provides":180,"reviews":181,"affected":188,"reported":188},"US",[],[182,185],{"label":183,"url":184},"Gartner Peer Insights: Dataminr for Cyber Defense user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fdataminr-for-cyber-defense",{"label":186,"url":187},"PeerSpot: ThreatConnect Threat Intelligence Platform (TIP) user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fthreatconnect-threat-intelligence-platform-tip-reviews",0,{"hq_country":179,"also_provides":190,"reviews":191,"affected":204,"reported":205},[],[192,195,198,201],{"label":193,"url":194},"SE Labs enterprise endpoint test Apr-Jun 2026: CrowdStrike Falcon","https:\u002F\u002Fselabs.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fsecurity-evaluation-test-report-enterprise-crowdstrike-falcon-2026-07-factsheet.pdf",{"label":196,"url":197},"AV-Comparatives EPR test 2025: CrowdStrike Falcon Enterprise","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2025\u002F09\u002FEPR_CrowdStrike_2025.pdf",{"label":199,"url":200},"Gartner Peer Insights: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcrowdstrike-falcon",{"label":202,"url":203},"PeerSpot: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcrowdstrike-falcon-reviews",4,15,{"hq_country":179,"also_provides":207,"reviews":208,"affected":221,"reported":222},[],[209,212,215,218],{"label":210,"url":211},"Gartner Peer Insights: Google SecOps user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fgoogle-secops",{"label":213,"url":214},"PeerSpot: Mandiant Advantage user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fmandiant-advantage-reviews",{"label":216,"url":217},"CSO Online: Top 10 vendors for AI-enabled security, according to CISOs (2026)","https:\u002F\u002Fwww.csoonline.com\u002Farticle\u002F4115785\u002Ftop-10-vendors-for-ai-enabled-security-according-to-cisos.html",{"label":219,"url":220},"CSO Online: SOAR buyer's guide: 11 security orchestration, automation, and response products (2025)","https:\u002F\u002Fwww.csoonline.com\u002Farticle\u002F3622920\u002Fsoar-buyers-guide-11-security-orchestration-automation-and-response-products-and-how-to-choose.html",111,80,{"hq_country":179,"also_provides":224,"reviews":225,"affected":188,"reported":188},[],[226,227],{"label":183,"url":184},{"label":186,"url":187},{"hq_country":179,"also_provides":229,"reviews":230,"affected":188,"reported":237},[],[231,234],{"label":232,"url":233},"PeerSpot: Recorded Future user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Frecorded-future-reviews",{"label":235,"url":236},"Gartner Peer Insights: Recorded Future Intelligence Platform user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Frecorded-future-intelligence-platform",3,{"hq_country":179,"also_provides":239,"reviews":240,"affected":237,"reported":244},[],[241],{"label":242,"url":243},"Gartner Peer Insights: ReliaQuest GreyMatter user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Freliaquest-greymatter-314541335",8,{"hq_country":246,"also_provides":247,"reviews":248,"affected":188,"reported":249},null,[],[],12]