Vulnerability Intelligence

Mitigate your risk & increase your security team's effectiveness.

Download Data Sheet

TRACKING THE VULNERABILITY AND EXPLOIT LIFECYCLE YIELDS HIGH-LEVEL RESULTS

Effective vulnerability management begins with timely, comprehensive and contextualized vulnerability intelligence. Without high quality intelligence the probability of failing to patch high risk vulnerabilities increases, leaving your business exposed to costly breaches.

The Intel 471 Vulnerability Intelligence Dashboard proactively tracks the threat life cycles of vulnerabilities and exploit activity observed in the cyber underground, helping illuminate vulnerabilities at a greater risk of exploitation and maximize the effectiveness of your limited resources. Our Vulnerability Intelligence alerts let you immediately see changes in a vulnerability's threat level, enabling decisive prioritized remediation based on real and active threats.

Timely weaponized CVE alerting

Timely alerts of exploit lifecycle indicators allow you to instantly recognize the threat level associated with a vulnerability and mitigate your risk.

A live feed of the latest indicators of compromise (loCs), malware artifacts, and command-and-control (C2) information

Detailed intelligence bulletins that contextualize mass exploitation of a CVE and map CVEs to active malware and ransomware campaigns

Weekly CVE weaponization reports

RELEVANT & TIMELY INTELLIGENCE

Intel 471’s Vulnerability Intelligence is purposefully designed to provide both relevant and timely intelligence information about the adversary scenario and address the gap in current vulnerability offerings.

VULNERABILITY INTELLIGENCE-DRIVEN
PATCHING

How we determine what CVEs to monitor

Prioritizing which vulnerabilities to patch is one of the most difficult security challenges in vulnerability management. Strong indicators of what threat actors may target in the future include underground chatter about publicly disclosed vulnerabilities assigned a Common Vulnerabilities and Exposures (CVE) identifier, and interest in the availability of reliable exploits.

Vulnerability Intelligence monitors the underground for CVEs associated with these indicators, such as threat actor discussions about a CVE, weaponized CVEs, and offers to sell exploits for a CVE. Other criteria for monitoring include Common Vulnerability Scoring System (CVSS) scores and broad customer interest in specific disclosed vulnerabilities.

Open Source Intelligence

We also monitor vulnerabilities that have not been discussed in the underground, such as previously undisclosed or “zero-day” vulnerabilities. Our automated collection covers vendor reports and security bulletins, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) catalog, and much more.

Relevant, Contextualized Reporting

Vulnerability Intelligence provides continuously updated snapshots and in-depth reporting of vulnerabilities that provide context and analyst-driven insights to help teams quickly evaluate their risks and the threat environment. Vulnerability Intelligence reporting includes:

The Common Vulnerabilities and Exposures (CVE) Weaponization Report, a weekly snapshot of vulnerabilities and exploits that have been discussed, sought, and weaponized.

The Monthly Vulnerability Review covers actively exploited vulnerabilities and maps CVEs to malware campaigns and ransomware activity.

Ad hoc in-depth Vulnerability Spotlights on significant vulnerabilities, findings from our vulnerability and threat analysis, threat hunt packages, and detection, mitigation/remediation strategies.

Threat-actor Profile Reports that offer a deep dive into the actor’s tactics, techniques, and procedures (TTPs) with CTI enrichment aligned to the MITRE Adversarial Tactics, Techniques and Common Knowledge (ATT&CK) framework.

Ad-hoc Situational Reports on breaking topics and unfolding events, including but not limited to CVEs under mass exploitation.

Vulnerability Intelligence

TRACKING THE VULNERABILITY AND EXPLOIT LIFECYCLE YIELDS HIGH-LEVEL RESULTS

RELEVANT & TIMELY INTELLIGENCE