We just wanted to put out a quick update on our Intelligence system. A week or so we put out a message stating that we were developing and deploying an intelligence platform for our customers. We are happy to announce that the system is nearing completion and should be available in early January. The new platform chosen will provide some really awesome features for our customers including the following: Entity Extraction - People, places, things, objects, actions, etc. to inc

Every single day, Jigsaw Security collaborates with over 480 sources of threat intelligence providers, researchers, Government and academic organizations interested in stopping malware, ransomware and other threats. Today, Jigsaw Security updated our companion application OSINT-X which allows Jigsaw Security to ingest thousands of new sources. Some of the sources are noted below: Helios CERT Data Pastebin DarkWeb Forums and Similar Sites Bad Packets DHS AIS Malware Tracker An

Jigsaw Security's new wire service will stream news articles, titles and information directly to your intelligence platform. The service, an offshoot of our OSINT-X ingest framework will pull news articles and store the full text of the articles in your intelligence platform for long term storage, analytics and other reporting and research. One of the main issues with many platforms is that if an article or topic is removed from a website it disappears from archived data. Wit

As many are aware US-CERT has issued several alerts and has been communicating that the Department of Justice has taken action to indict two Chinese actors. Two members of China's APT 10 hacking group have been indicted by the US Department of Justice on charges unsealed this morning. Zhu Hua (aka Afwar, CVNX, Alayos, and Godkiller) and Zhang Shilong (aka Baobeilong, Zhang Jianguo, and Atreexp) were charged with conspiracy to commit computer intrusions, conspiracy to commit w

Fig 1: A look at the Jigsaw Security Threat Feed What makes our threat intelligence different than our competitors? One of the main advantages that Jigsaw Security brings to the threat intelligence arena is that our threat intelligence is derived in house through automation and leveraging big data to eliminate false positives. Most companies selling threat intelligence data are simply aggregating intelligence information. Jigsaw Security does the same thing but we take it a s

Jigsaw Security announced today that our commercial sensor now interfaces with MISP directly. Simply add your API key to our FirstWatch sensor and all information entered in MISP is instantly available to FirstWatch for monitoring. What is MISP? MISP is the Malware Information Sharing Platform which is available for free on Github. MISP is a free solution for storing threat intelligence and for sharing information between organizations securely. The automation of threat intel

One of the most challenging things we do is to setup monitoring of DNS sinkhole activity at customer sites. When a company utilizes our products the immediate response is that the information coming out of the sensors is overwhelming partly because the amount of information observed and reported is missed by most IDS/IPS systems and also because we monitor the DNS stream to find detail missed by other solutions. DNS is a treasure trove of data when you implement it in the man