We use cookies to improve your experience. Do you accept?

Knock Knock, Who’s there? Threat Intel!

Knock Knock, Who’s there? Threat Intel! - Featured Image

Tactics, T • Feb 28, 2019

When it comes to Cyber Threat Intelligence (CTI), the focus should be not only on the collection of information from various sources but also sharing crucial threat information among peers.

When an organization is targeted by cybercriminals, the security teams respond and mitigate the threat, by gathering key insights about the threat actors & their TTPs, and then taking the right measures to block them. If the threat information and other insights gained by the security team is shared with peer organizations, government agencies, sectoral ISACs, customers, vendors, and other ecosystem partners, then it can help them avoid the threat in advance.

Sharing is caring but…

However, most organizations are quite restrained when it comes to sharing threat information. Due to the complex multi-stakeholder environment, organizations often follow a lengthy process before releasing any details about a cyber incident. The reputation of public or private organizations can also be affected by the disclosure of such details.

This limits the collaboration between security teams from various organizations as they cannot communicate and prevent further incidents across the industry, without sharing any threat information. The efficacy of CTI operations is also impacted due to such circumstances.

How CTIX addresses the issue?

To address this crucial issue, Cyware Threat Intelligence eXchange (CTIX) now enables members to share threat intel from a variety of sources, through anonymous submissions at the click of a button. The automatic anonymization ensures that the platform does not store any information related to the member who shares the information, thus keeping them completely anonymous.

It should be noted that anonymizing the information and the identity of the source is a well-known concept practiced by most organizations while sharing threat information. However, this used to be done manually by the analysts at the Security Operations Center (SOC). But now, with this new feature, each CTIX-based TAXII client will be able to automatically anonymize the information before sharing it to the central hub, thus protecting the organization's identity before any information leaves their perimeter.

Since CTIX provides a hub-and-spoke model for intel sharing, any member can share Indicators from their Intel Feed to all other members connected to the same hub.

With the Anonymous Submissions feature, members can share Indicators, Vulnerability, TTPs, Malware, or any other intel, without fear of identity exposure or attribution. Members can also share custom STIX packages and collections from the rules created for tracking threats via anonymous submissions.

Anonymity ensures that an organization does not feel apprehensive due to the risks associated with sharing their identity while communicating threat information with others. Thus, CTIX now further boosts the collaboration in CTI operations through anonymous information sharing, thereby eliminating the factor of risking out an organization’s reputation.

Related Blogs

Maximize Threat Intelligence Value with Custom Scores in Intel Exchange - Featured Image

Maximize Threat Intelligence Value with Custom Scores in Intel Exchange

The ability to prioritize and efficiently handle threats is paramount. Cyware’s [Intel Exchange](https://cyware.com/products/threat-intelligence-exchange) enhan

Threat intelligenceCTIXIntel ExchangeIntel Exchange (CTIX)
Threat Intelligence Must be for Everyone - Featured Image

Threat Intelligence Must be for Everyone

At a recent Google Cloud security event, Jayce Nichols, Google’s director of adversary operations discussed threat intelligence and was quoted as saying, “If yo

Threat intelligenceCyber Threat Intelligence
IOC Ingestion Made Easy with CTIX-Slack Integration - Featured Image

IOC Ingestion Made Easy with CTIX-Slack Integration

Cyware has integrated its threat intelligence exchange platform, [Intel Exchange (CTIX)](https://cyware.com/products/threat-intelligence-platform) with the popu

CTIXCTIX/Slack IntegrationCTIX/Slack
Analyze Malicious Files in a Sandboxing Environment with Cyware’s Intel Exchange (CTIX) - Featured Image

Analyze Malicious Files in a Sandboxing Environment with Cyware’s Intel Exchange (CTIX)

Sandboxing provides a safe environment where security teams can detonate malicious programs, files, or URLs to analyze and observe their behavior. With the rele

SandboxingCTIXThreat Analysis
Threat Intelligence As A Service - Featured Image

Threat Intelligence As A Service

## **An Attractive MSSP Revenue Opportunity** Your organization has many options for assessing potential threat data, and there are so many threat intelligenc

Threat Intelligence-as-a-ServiceCTIXThreat Intelligence PlatformManaged Security Service Providers (MSSPs)
#BeCyberSmart: How Threat Intel Sharing is Making Organizations Safer? - Featured Image

#BeCyberSmart: How Threat Intel Sharing is Making Organizations Safer?

October is the month where most of us are excited to plan our fun Halloween celebrations. However, we also celebrate it as Cybersecurity Awareness Month, which

Threat Intel SharingCybersecurity Awareness Month.Collective DefenseCyber Threat Intelligence
Are you a small team facing increased cyber risk? Boost your security posture with greater access to threat intelligence. Here's how. - Featured Image

Are you a small team facing increased cyber risk? Boost your security posture with greater access to threat intelligence. Here's how.

A modern cybersecurity stack consists of many different tools. These tools range from conventional preventive defenses like antivirus and firewalls to response-

Threat Intelligence PlatformCyber Threat Intelligence
The Role of Threat Intelligence Sharing in Collective Defense - Featured Image

The Role of Threat Intelligence Sharing in Collective Defense

492 BC - The Battle of Marathon was to begin. After 9 days of waiting for the other side to attack, the Athenians directly charged the Persians in a Phalanx for

Threat intelligenceCTIXCyware Threat Intelligence Exchange (CTIX)Collective Defense
Cyware Adds STIX 2.1 Support for Custom Threat Intelligence Feeds - Featured Image

Cyware Adds STIX 2.1 Support for Custom Threat Intelligence Feeds

**What is STIX 2.1?** [STIX](https://oasis-open.github.io/cti-documentation/stix/intro.html) is a language and serialization format that enables organizati

STIX 2.0STIX 1.xCyware Threat Intelligence Exchange (CTIX)STIX 2.1
How to Leverage Threat Intelligence for Effective Vulnerability Management - Featured Image

How to Leverage Threat Intelligence for Effective Vulnerability Management

Security teams deal with many operational activities on a daily basis that are time-sensitive in nature. One such key activity is vulnerability management. Ever

Cyber Fusion and Threat ResponseCyware Threat Intelligence Exchange (CTIX)Cyber Threat Intelligencevulnerability management
Stop Threat Actors at an Early Stage of the Attack Lifecycle with Threat Intelligence and Hunting - Featured Image

Stop Threat Actors at an Early Stage of the Attack Lifecycle with Threat Intelligence and Hunting

Cyberattacks, unlike physical crime, can span over a long period of time without the knowledge of the targeted victims. Threat actors diligently aim to hide the

Threat HuntingCyber Threat IntelligenceCyber Attack Lifecycle
Turning the Gears of the Threat Intel Lifecycle with Automation - Featured Image

Turning the Gears of the Threat Intel Lifecycle with Automation

Threat intelligence has become a key tool leveraged by security teams worldwide in combating smart adversaries on all fronts. Whether it comes to driving preemp

Cyware Threat Intelligence eXchangeSecurity AutomationCyber Threat Intelligence