Read insights, thought leadership, and platform updates.

Explore all posts

Topics

Showing 575 posts

Align Your Security Operations with MITRE ATT&CK v16 Using the ThreatConnect ATT&CK Visualizer

Last October, MITRE released ATT&CK v16. In a blog post, the organization described its latest updates as a mission in balance, with the goal of “striking that perfect chord between familiar and pioneering to keep things real and actionable.” While MITRE’s ATT&CK framework is a well-known and popular tool in cybersecurity circles, many teams still […]

Posted Mar 18th, 2025

Cyber Risk Quantification

Transforming Third-Party Risk Strategy with Financial Risk Quantification & SecurityScorecard

Organizations today rely heavily on third-party vendors to support their operations (e.g., call centers, shipping centers, data storage providers, etc.). While these partnerships offer numerous benefits, they can also introduce significant cyber risks. Managing a complex network of vendors can be difficult, as traditional risk assessments often don’t provide a clear or measurable view of […]

Posted Feb 25th, 2025

Threat Intelligence Platform

Debunking Anomali’s Claims: Why ThreatConnect is the Superior Threat Intelligence Platform

As a cybersecurity vendor, I like to take a larger view of the market when it comes to the competition. Competitor or not, we’re all on the same side: fighting the good fight against attackers – and hopefully whatever solution is chosen by cybersecurity teams helps them stay ahead and maintain whatever advantage that vendor […]

Posted Feb 13th, 2025

Threat Intelligence Operations

Automating Threat Data Retrieval: How ThreatConnect, Polarity, and the TQL Generator are Changing the Game

You’re a CTI Analyst tasked with investigating a potential phishing campaign targeting your organization. An alert flags a suspicious email containing a URL that may be linked to a known threat actor. It would be best to determine the URL’s risk level, identify related indicators, and quickly distribute actionable intelligence to your security team. Toggling […]

Posted Jan 22nd, 2025

Threat Intelligence Operations

Higher Fidelity Investigations with Actionable Search, TQL Generator, and More in TI Ops 7.8

When a critical alert lands on your desk, every second counts. Whether you’re triaging flagged IPs, investigating APT activity, or gathering intelligence for a report, the pressure to act quickly and accurately can feel relentless. The reality is clear: manual investigations are too slow, and incomplete data leaves room for error. You need tools that […]

Posted Jan 15th, 2025

Polarity

How ThreatConnect and Polarity Empower Teams to Combat Phishing Threats

Phishing remains one of the most effective and pervasive attack methods for cybercriminals, with threats evolving in sophistication and becoming increasingly difficult to detect. To stay ahead, security teams need tools that deliver contextualized intelligence and seamless workflows to tackle these challenges. ThreatConnect and Polarity provide an integrated solution to address phishing threats effectively, empowering […]

Posted Jan 9th, 2025

Thought Leadership

ThreatConnect’s 2024 Year in Review: Let’s Celebrate What We’ve Accomplished Together

With 2024 in our rearview mirror, let’s take a moment to reflect. Like always, threats are evolving, and security challenges are becoming… more challenging: escalations in targeted ransomware attacks, emerging techniques like adversary-in-the-middle phishing, and a stream of vendors throw all of their offerings into the mix that now need to be integrated into your […]

Posted Jan 2nd, 2025

Threat Intelligence Platform

Navigate ISO 27001:2022 Compliance with ThreatConnect

ISO 27001 has long set the standard for managing information security. Still, the 2022 updates bring a critical shift: organizations must now effectively process and analyze threat intelligence to stay ahead of increasingly sophisticated threats. These updates go beyond compliance, challenging organizations to integrate actionable intelligence and streamline security operations. For many, this introduces new […]

Posted Dec 20th, 2024

Threat Intelligence Operations

Unlocking the Potential of Cyber Threat Intelligence: A Guide to the Threat Intelligence Maturity Model

A rapidly evolving cyber threat landscape demands that organizations adopt more than reactive defenses—they need proactive, intelligence-driven strategies. The Threat Intelligence Maturity Model (TIMM) serves as a roadmap for organizations to assess, plan, and advance their cyber threat intelligence (CTI) capabilities, regardless of their journey. The Five Levels of Threat Intelligence Maturity The TIMM provides […]

Posted Dec 13th, 2024

Partners

Solving Complex Threats with Microsoft Copilot Integration for ThreatConnect

Security teams face constant pressure to sift through vast data to identify threats, assess risks, and respond promptly. Imagine a scenario where a Cyber Threat Intelligence (CTI) team is investigating a sophisticated phishing campaign targeting their organization. Clues are minimal, and time is critical. This is where the Microsoft Copilot for Security integration with ThreatConnect […]

Posted Nov 25th, 2024

How-to Guides

Five Quick Tips to Enhance Your Threat Hunting Program

As a CTI analyst, you know that advanced threats often evade traditional security tools, leaving gaps that can put your organization at risk. Whether starting from scratch or seeking to elevate your current threat-hunting program, the challenge is real: you need to hunt for these hidden threats proactively, but building a structured, effective program takes […]

Posted Nov 18th, 2024

Partners

Unlock Enhanced Threat Detection with ThreatConnect and CrowdStrike

Unlock Enhanced Threat Detection with ThreatConnect and CrowdStrike In today’s fast-paced cybersecurity landscape, security teams face many alerts and struggle to filter through false positives to prioritize critical incidents. The integration of ThreatConnect and CrowdStrike Falcon Insight XDR offers a powerful solution to this challenge, empowering security operations teams with high-fidelity threat intelligence and seamless […]

Posted Nov 13th, 2024