During a recent cyber exercise we uncovered some interesting activity by monitoring traffic going into several hosting partners. Initially we started seeing many TOR and VPN connections from servers so we were not sure of the content. Upon realizing that TOR was being leveraged hide traffic we decided to do what any security team worth their salt would do. We went to our own TOR exit nodes and started searching for connections. Within minutes our TOR nodes started painting a

We are urging our users and partners to report any activity observed around the following incident. Our FirstWatch sensor is detecting suspicious activity targeting Government and very specific industries of interest to nation state actors. Reports may be reported through the sitings features in our Jigsaw Security Threat Intelligence portal event 28305. A discussion on this activity is ongoing by security researchers. Indicators of Compromise The following indicators are bei

Back in 2015, Jigsaw Security began working with and talking to folks involved with the ICS-ISAC group. Back then the ISAC asked if we could create an intelligence product that would allow us to organize and catalog intelligence and vulnerability bulletins in a full text researchable data product to allow ICS research in our platform. At the time it was nearly impossible due to the fact that each organization ICS-CERT, ICS-ISAC, news and open source sites, RSS feeds and other

Jigsaw Security's OSINT-X ingestion platform brings in live Twitter, Facebook and RSS feeds quickly and easily. The software has not been configured to pull threat intelligence from vetted sensors that post to social media. This new capability enriches data used to determine what others are seeing. This new update is bringing in over 40 different feeds from other threat intelligence companies so that Jigsaw can see who is seeing what type of attack and how threats are moving