[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-150":3},{"item":4,"lessons":16,"controls":58,"related":86},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-150","SP 800-150","SP 800-150: Guide to Cyber Threat Information Sharing",10,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST guidance on establishing and participating in cyber threat information sharing relationships. It covers the benefits and challenges of sharing, setting goals and scope, handling sensitive information and using shared information effectively.\n\n**In practice.** Organisations define what they want from sharing, join relevant communities such as sector groups or national CSIRT networks, and agree handling rules, for example the Traffic Light Protocol. Received indicators are integrated into detection and shared information is sanitised. Evidence includes sharing agreements, handling procedures and records of how shared intelligence was used.\n\n**Common gaps.** Typical gaps are consuming feeds without the capacity to act on them, never contributing back and no rules for handling sensitive shared information. Some organisations also hesitate to share for fear of reputational or legal consequences.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpublications\u002Fsp800","Find it among NIST SP 800 publications","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54],{"slug":19,"title":20,"published_at":21},"iranian-chosen-brick-malware-targets-dissidents-and-activists-worldwide","Iranian 'Chosen Brick' Malware Targets Dissidents and Activists Worldwide","2026-09-16T12:20:21.643+00:00",{"slug":23,"title":24,"published_at":25},"state-sponsored-cyber-threats-are-now-an-everyday-business-risk","State-Sponsored Cyber Threats Are Now an Everyday Business Risk","2026-09-09T16:21:21.985+00:00",{"slug":27,"title":28,"published_at":29},"nation-state-actor-exploits-security-maturity-gaps-in-afghan-organizations","Nation-State Actor Exploits Security Maturity Gaps in Afghan Organizations","2026-08-20T16:20:21.004+00:00",{"slug":31,"title":32,"published_at":33},"zero-knowledge-proofs-could-unlock-safer-cyber-risk-sharing","Zero-Knowledge Proofs Could Unlock Safer Cyber Risk Sharing","2026-08-04T13:20:19.201+00:00",{"slug":35,"title":36,"published_at":37},"android-btmob-rat-evolves-into-fragmented-underground-ecosystem","Android BTMOB RAT Evolves Into Fragmented Underground Ecosystem","2026-08-03T16:21:00.061+00:00",{"slug":39,"title":40,"published_at":41},"ransomware-nation-states-hacktivists-converge-on-uk-and-ireland","Ransomware, Nation-States & Hacktivists Converge on UK and Ireland","2026-07-22T10:20:18.899+00:00",{"slug":43,"title":44,"published_at":45},"bridging-the-gap-between-threat-intelligence-and-decisive-action","Bridging the Gap Between Threat Intelligence and Decisive Action","2026-07-15T18:20:38.085+00:00",{"slug":47,"title":48,"published_at":49},"bulletproof-hosting-networks-enable-global-cybercrime-at-scale","Bulletproof Hosting Networks Enable Global Cybercrime at Scale","2026-07-15T12:20:22.638+00:00",{"slug":51,"title":52,"published_at":53},"ai-powered-scambuster-fights-back-against-phishing-scammers","AI-Powered 'ScamBuster' Fights Back Against Phishing Scammers","2026-07-13T14:20:56.399+00:00",{"slug":55,"title":56,"published_at":57},"236000-fraudulent-dcloud-sites-drive-global-crypto-scam-wave","236,000 Fraudulent DCloud Sites Drive Global Crypto Scam Wave","2026-06-29T14:21:42.752+00:00",[59,64,69,73,77,82],{"slug":60,"name":61,"problem":62,"stories":63},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",4,{"slug":65,"name":66,"problem":67,"stories":68},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",2,{"slug":70,"name":71,"problem":72,"stories":68},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":74,"name":75,"problem":76,"stories":68},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",{"slug":78,"name":79,"problem":80,"stories":81},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.",1,{"slug":83,"name":84,"problem":85,"stories":81},"managed-detection-response","Managed detection and response (MDR)","A team watches and responds around the clock when you cannot.",[87,93,99,104,109,113,117,121],{"family":88,"item":89,"code":90,"title":91,"together":92},"cis","17","Control 17","Incident Response Management",7,{"family":94,"item":95,"code":96,"title":97,"together":98},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",6,{"family":100,"item":101,"code":102,"title":103,"together":98},"gdpr","32","Article 32","Security of processing",{"family":5,"item":105,"code":106,"title":107,"together":108},"800-61","SP 800-61","SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management",5,{"family":88,"item":110,"code":111,"title":112,"together":108},"13","Control 13","Network Monitoring and Defense",{"family":88,"item":114,"code":115,"title":116,"together":108},"7","Control 7","Continuous Vulnerability Management",{"family":118,"item":119,"code":120,"title":120,"together":63},"itil","overview","ITIL",{"family":88,"item":122,"code":123,"title":124,"together":125},"14","Control 14","Security Awareness and Skills Training",3]