Michael DeBolt 🇺🇦

Chief Intelligence Officer @Intel471Inc | @CTIcmm Creator | Recovering Fed | USMC scout combat vet | Girl Dad Extraordinaire | Views are my own

[Intel 471 @Intel471Inc]

#Tycoon2FA, a phishing as a service platform used to bypass MFA in large scale credential theft campaigns, has been taken offline. Intel 471 contributed #threatintelligence supporting the investigation. Our analysis: https://t.co/aO7VThLfMg

#CTI #cybersecurity #phishing

[Intel 471 @Intel471Inc]

Ransomware, phishing, and supply chain attacks are hitting the #automotiveindustry harder each year. Our latest report breaks down the top #cyberthreats and what security teams need to know: https://t.co/mv7V2LYM57

#threatintel #cybersecurity

[Michael DeBolt 🇺🇦 @michael_deebo]

@ItsReallyNick Actor behind the service said it's "due to unforeseen circumstances" 😂

[Michael DeBolt 🇺🇦 @michael_deebo]

Sweet sleuthy socks just in time for #SLEUTHCON next month! Make sure to catch @Intel471Inc's very own Simon Williams for a crazy but true story about a cyber criminal turned Russian war casualty.

[CTI-CMM @CTIcmm]

🚨 Big News! Version 1.2 of the CTI-CMM framework is here! 🚨

We’re proud to officially debut this release at the FIRST CTI Conference during the talk: 🎤 "Immaturity Can Be Fun: Just Not in a CTI Program" 🎤
by @gertjanbruggink

What’s new in v. 1.2?
✨ A brand-new CTI-specific metrics section
📚 An expansive intel data source library
🛠️ An updated CTI program assessment tool

You can download v. 1.2's PDF at https://t.co/cSWsnj3ZaQ and a standalone spreadsheet of the metrics and the CTI program assessment tool on our Github page: https://t.co/HYgjb8LcRp

This update wouldn't have been possible without the incredible team of volunteers who poured their time and expertise into making it happen. A huge thank you as well to @Intel471Inc for their invaluable behind-the-scenes support and to our advisors and the wider community—your feedback and insight continues to push the CTI-CMM forward. 🙌

Let’s keep raising the bar for Cyber Threat Intelligence.

#CTICMM #CTI #ThreatIntel #FIRSTCTI2025 #CyberSecurity #Intel471 #CommunityDriven #BetterTogether

[Intel 471 @Intel471Inc]

CISA’s new advisory highlights how fast flux techniques help #cybercriminals keep malicious infrastructure online. Intel 471’s research on bulletproof hosting is cited in the report. Read the report: https://t.co/7IdZN8OktT

#threatintel #cybersecurity #CISA #cyberthreats

[CTI-CMM @CTIcmm]

If we were to write a blog explaining the utility of CTI-CMM vs. other industry maturity assessments, would this help your CTI program?

[Stephen Brent Sargeant @lifesgt]

@michael_deebo (@Intel471Inc): Cybercrime disruption. 💡 Learn to challenge resilience & make them doubt. Strategies revealed. Learn the methods now. #Cybersecurity

[Intel 471 @Intel471Inc]

#Threathunting is stronger when we refine our approach together. Join Intel 471 on March 27 for a four-hour hands-on workshop on identifying adversary behaviors. Complete the final challenge to earn the Threat Hunting – Foundational Badge.

Sign up: https://t.co/SI6GarYvHm

[CTI-CMM @CTIcmm]

Today we'd like to spotlight one of our most active contributors, Caitlin Fernandez, who sits on the Fraud and Situation committees. Caitlin is a cybersecurity leader with over a decade of experience in #cti, #riskmanagement, and international #cybercrimeinvestigations. Caitlin currently leads @TD's Fusion Threat Intelligence program, where she integrates cyber, fraud, physical, and geopolitical intelligence to protect the organization. Previously, she built @JPMorgan Chase's first M&A threat intelligence and subsidiary #soc program and worked in @INTERPOL’s Cyber Fusion Center, strengthening global intelligence-sharing frameworks. She holds a Master’s in cybersecurity from @NYU and multiple industry certifications.

Caitlin resides in New Jersey with her husband and daughter where they enjoy exploring NJ pizza spots (duh), coffee shops, and proving that soccer is far superior to every other sport.

[CTI-CMM @CTIcmm]

We were having some internal discussions the other day and are pleased to announce that we are looking to grow the project team! We're looking for someone with front end web dev skills to help with a tech stack migration and site rebuild effort. If interested send over a DM.

[CTI-CMM @CTIcmm]

For our next monthly member spotlight, we'd like to showcase Alexander Perez Palma. Alex has over 15 years of experience in information security, driving thought leadership and innovation in roles ranging from engineering to architecture to working #CTI for @Workday. Alex is a long time industry player having previously worked for @Cisco #Talos and @BoozAllen. Some of Alex's accolades include the publication of several #CVEs, empowering teams to understand adversary tradecraft, navigate their #threatlandscape, and enable informed decision-making for red team exercises, mitigations, and threat hunting.

Arguably, Alex is probably the most extroverted member here at #CTICMM! He is known for bridging communities and fostering collaboration. In his free time, he enjoys working out, meditating, traveling, catching up on reading, cards and board games.

Alex will be joining @CTIAdvisory on 27-28 January at the @sansforensics #CTISummit25 to discuss CTI-CMM version 1.1 and how organization can use this model to improve their CTI capability. If you plan to attend, stop by and introduce yourself.

[CTI-CMM @CTIcmm]

We are happy to announce the release of #cticmm version 1.1, which includes a new domain for Fraud teams as CTI stakeholders and a beta version of an assessment tool for benchmarking organizational reach and impact. With this release, we have also updated our website to include some enablement material, explanative guides, and ways to provide feedback and get involved.

🎯On the near term horizon, expect the following from us:

--📝A poll soliciting thoughts on where we should prioritize our efforts for version 1.2

--🧙‍♂️Additional enablement material on how to improve maturity levels within each domain

--😺John Holland and Alex Perez Palma presenting on how to implement CTI CMM during their @sansforensics #ctisummit25 talk as the first of a series of 2025 small roadshow talks at various conference and industry forums

Head over to https://t.co/cSWsnj3rli to download your copy of version 1.1.

Shout outs to our friends over at @socradar, @cosiveco, and #morado #threatnote for publishing content on CTI-CMM usage; to @Intel471Inc for its sponsorship of the #cticmm project; and to each and everyone of you #cti practitioners for all you do. #bettertogether #infosec

[Intel 471 @Intel471Inc]

Intel 471’s Michael DeBolt breaks down 2025’s biggest cybersecurity trends. AI-fueled attacks, malware rebounds like Bumblebee, and evolving tactics show how cybercriminals stay ahead. Read more: https://t.co/AMbFpUN4VS

#threatintel #cybersecurity #threathunting #cybercrime

[CTI-CMM @CTIcmm]

We've had a lot going over the past few months to hone internal processes, incorporate community feedback, and continue to drive domain development. As of last night, we hit an internal milestone where version 1.1 went pens down and is now with tech edit for final review.

Here's a listing of the sections that got uplifted from version 1.0:
☑️Threat
☑️Risk Management
☑️Access
☑️Situational Awareness
☑️Third-party Risk Management
☑️Fraud

With the upcoming #cticmm release on 1 January, we are also unveiling:
🎯A Beta self-assessment tool
🎯A much improved website

We're keen to solicit feedback once we release version 1.1. To those that provided feedback on version 1.0, thank you, we will be reaching out directly to let you know how your input helped drive the version 1.1 forward. #cti #bettertogether

[CTI-CMM @CTIcmm]

Unbeknownst to her, @ericalikestech's printing and bounding our #CTI maturity framework into this sleek compendium helped inspire our group of industry volunteers as we are making strides towards finalizing updates for version 1.1. Stay tuned for more details on version 1.1, release date, etc. soon. #thankyouerica

[Intel 471 @Intel471Inc]

Rise of 'pink slime' news sites threatens online news integrity and democracy. How to maintain a free press with accurate information? Intel 471 analysts surveyed some of the key organizations and people that color the pink slime journalism landscape: https://t.co/nG49O3Hjjm

[CTI-CMM @CTIcmm]

Its been about two months since we released the Cyber Threat Intelligence Capability Maturity Model #CTICMM version 1.0 publicly and we'd like to ask you all for feedback on it as we are just starting the planning cycle for updates to incorporate in version 1.1. Particularly, we'd love to hear how you are using the framework, what you've liked about it, and what didn't quite feel right.

To facilitate a structured feedback capture, we've created this short survey: https://t.co/AD7xthpxQF

Also, @AugustVansickl2, our Domain lead for the Assets section is actively looking for feedback on some future changes. Help a brother out! https://t.co/p4oe8nbDVn

Curious to find out more about CTI-CMM? Visit our website at https://t.co/cSWsnj3ZaQ #CTI #cybersecurity

[Intel 471 @Intel471Inc]

The Cybercrime Atlas initiative is reshaping the fight against cybercrime. We are honored to be a part of this community with Cybercrime Atlas & @WEF working to make a significant impact on cybercrime and contribute to a more secure world. Get the report: https://t.co/36yuCBtYnB