#Tycoon2FA, a phishing as a service platform used to bypass MFA in large scale credential theft campaigns, has been taken offline. Intel 471 contributed #threatintelligence supporting the investigation. Our analysis: https://t.co/aO7VThLfMg
#CTI#cybersecurity#phishing
Ransomware, phishing, and supply chain attacks are hitting the #automotiveindustry harder each year. Our latest report breaks down the top #cyberthreats and what security teams need to know: https://t.co/mv7V2LYM57
#threatintel#cybersecurity
Sweet sleuthy socks just in time for #SLEUTHCON next month! Make sure to catch @Intel471Inc's very own Simon Williams for a crazy but true story about a cyber criminal turned Russian war casualty.
🚨 Big News! Version 1.2 of the CTI-CMM framework is here! 🚨
We’re proud to officially debut this release at the FIRST CTI Conference during the talk: 🎤 "Immaturity Can Be Fun: Just Not in a CTI Program" 🎤
by @gertjanbruggink
What’s new in v. 1.2?
✨ A brand-new CTI-specific metrics section
📚 An expansive intel data source library
🛠️ An updated CTI program assessment tool
You can download v. 1.2's PDF at https://t.co/cSWsnj3ZaQ and a standalone spreadsheet of the metrics and the CTI program assessment tool on our Github page: https://t.co/HYgjb8LcRp
This update wouldn't have been possible without the incredible team of volunteers who poured their time and expertise into making it happen. A huge thank you as well to @Intel471Inc for their invaluable behind-the-scenes support and to our advisors and the wider community—your feedback and insight continues to push the CTI-CMM forward. 🙌
Let’s keep raising the bar for Cyber Threat Intelligence.
#CTICMM #CTI #ThreatIntel #FIRSTCTI2025 #CyberSecurity #Intel471 #CommunityDriven #BetterTogether
CISA’s new advisory highlights how fast flux techniques help #cybercriminals keep malicious infrastructure online. Intel 471’s research on bulletproof hosting is cited in the report. Read the report: https://t.co/7IdZN8OktT
#threatintel#cybersecurity#CISA#cyberthreats
@michael_deebo (@Intel471Inc): Cybercrime disruption. 💡 Learn to challenge resilience & make them doubt. Strategies revealed. Learn the methods now. #Cybersecurity
#Threathunting is stronger when we refine our approach together. Join Intel 471 on March 27 for a four-hour hands-on workshop on identifying adversary behaviors. Complete the final challenge to earn the Threat Hunting – Foundational Badge.
Sign up: https://t.co/SI6GarYvHm
Today we'd like to spotlight one of our most active contributors, Caitlin Fernandez, who sits on the Fraud and Situation committees. Caitlin is a cybersecurity leader with over a decade of experience in #cti, #riskmanagement, and international #cybercrimeinvestigations. Caitlin currently leads @TD's Fusion Threat Intelligence program, where she integrates cyber, fraud, physical, and geopolitical intelligence to protect the organization. Previously, she built @JPMorgan Chase's first M&A threat intelligence and subsidiary #soc program and worked in @INTERPOL’s Cyber Fusion Center, strengthening global intelligence-sharing frameworks. She holds a Master’s in cybersecurity from @NYU and multiple industry certifications.
Caitlin resides in New Jersey with her husband and daughter where they enjoy exploring NJ pizza spots (duh), coffee shops, and proving that soccer is far superior to every other sport.
We were having some internal discussions the other day and are pleased to announce that we are looking to grow the project team! We're looking for someone with front end web dev skills to help with a tech stack migration and site rebuild effort. If interested send over a DM.
For our next monthly member spotlight, we'd like to showcase Alexander Perez Palma. Alex has over 15 years of experience in information security, driving thought leadership and innovation in roles ranging from engineering to architecture to working #CTI for @Workday. Alex is a long time industry player having previously worked for @Cisco #Talos and @BoozAllen. Some of Alex's accolades include the publication of several #CVEs, empowering teams to understand adversary tradecraft, navigate their #threatlandscape, and enable informed decision-making for red team exercises, mitigations, and threat hunting.
Arguably, Alex is probably the most extroverted member here at #CTICMM! He is known for bridging communities and fostering collaboration. In his free time, he enjoys working out, meditating, traveling, catching up on reading, cards and board games.
Alex will be joining @CTIAdvisory on 27-28 January at the @sansforensics #CTISummit25 to discuss CTI-CMM version 1.1 and how organization can use this model to improve their CTI capability. If you plan to attend, stop by and introduce yourself.
We are happy to announce the release of #cticmm version 1.1, which includes a new domain for Fraud teams as CTI stakeholders and a beta version of an assessment tool for benchmarking organizational reach and impact. With this release, we have also updated our website to include some enablement material, explanative guides, and ways to provide feedback and get involved.
🎯On the near term horizon, expect the following from us:
--📝A poll soliciting thoughts on where we should prioritize our efforts for version 1.2
--🧙♂️Additional enablement material on how to improve maturity levels within each domain
--😺John Holland and Alex Perez Palma presenting on how to implement CTI CMM during their @sansforensics #ctisummit25 talk as the first of a series of 2025 small roadshow talks at various conference and industry forums
Head over to https://t.co/cSWsnj3rli to download your copy of version 1.1.
Shout outs to our friends over at @socradar, @cosiveco, and #morado #threatnote for publishing content on CTI-CMM usage; to @Intel471Inc for its sponsorship of the #cticmm project; and to each and everyone of you #cti practitioners for all you do. #bettertogether #infosec
Intel 471’s Michael DeBolt breaks down 2025’s biggest cybersecurity trends. AI-fueled attacks, malware rebounds like Bumblebee, and evolving tactics show how cybercriminals stay ahead. Read more: https://t.co/AMbFpUN4VS
#threatintel#cybersecurity#threathunting#cybercrime
We've had a lot going over the past few months to hone internal processes, incorporate community feedback, and continue to drive domain development. As of last night, we hit an internal milestone where version 1.1 went pens down and is now with tech edit for final review.
Here's a listing of the sections that got uplifted from version 1.0:
☑️Threat
☑️Risk Management
☑️Access
☑️Situational Awareness
☑️Third-party Risk Management
☑️Fraud
With the upcoming #cticmm release on 1 January, we are also unveiling:
🎯A Beta self-assessment tool
🎯A much improved website
We're keen to solicit feedback once we release version 1.1. To those that provided feedback on version 1.0, thank you, we will be reaching out directly to let you know how your input helped drive the version 1.1 forward. #cti #bettertogether
Unbeknownst to her, @ericalikestech's printing and bounding our #CTI maturity framework into this sleek compendium helped inspire our group of industry volunteers as we are making strides towards finalizing updates for version 1.1. Stay tuned for more details on version 1.1, release date, etc. soon. #thankyouerica
Rise of 'pink slime' news sites threatens online news integrity and democracy. How to maintain a free press with accurate information? Intel 471 analysts surveyed some of the key organizations and people that color the pink slime journalism landscape: https://t.co/nG49O3Hjjm
Its been about two months since we released the Cyber Threat Intelligence Capability Maturity Model #CTICMM version 1.0 publicly and we'd like to ask you all for feedback on it as we are just starting the planning cycle for updates to incorporate in version 1.1. Particularly, we'd love to hear how you are using the framework, what you've liked about it, and what didn't quite feel right.
To facilitate a structured feedback capture, we've created this short survey: https://t.co/AD7xthpxQF
Also, @AugustVansickl2, our Domain lead for the Assets section is actively looking for feedback on some future changes. Help a brother out! https://t.co/p4oe8nbDVn
Curious to find out more about CTI-CMM? Visit our website at https://t.co/cSWsnj3ZaQ #CTI #cybersecurity
The Cybercrime Atlas initiative is reshaping the fight against cybercrime. We are honored to be a part of this community with Cybercrime Atlas & @WEF working to make a significant impact on cybercrime and contribute to a more secure world. Get the report: https://t.co/36yuCBtYnB