Every 4 hours
Cyber
Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.
Threat intelligence
Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.
| Priority | Source | Website | Information |
|---|---|---|---|
| Ransomware.live | WebsiteRansomware.live | InformationRansomware groups, victims, incidents | |
| The DFIR Report | WebsiteThe DFIR Report | InformationDetailed intrusion investigations | |
| SANS Internet Storm Center | WebsiteSANS ISC | InformationAttack observations and incident analysis | |
| abuse.ch ThreatFox | WebsiteThreatFox | InformationIndicators of compromise | |
| abuse.ch URLhaus | WebsiteURLhaus | InformationMalware distribution infrastructure | |
| abuse.ch MalwareBazaar | WebsiteMalwareBazaar | InformationMalware hashes and metadata | |
| abuse.ch Feodo Tracker | WebsiteFeodo Tracker | InformationBotnet command-and-control infrastructure | |
| AlienVault OTX | WebsiteAlienVault OTX | InformationCommunity threat-intelligence indicators | |
| PhishTank | WebsitePhishTank | InformationPhishing intelligence | |
| Shadowserver Foundation | WebsiteShadowserver | InformationInternet exposure and threat reporting |
No articles with this category yet.