Lumen Threat Feed: V2 Connector Replaces Deprecated V1.1 with Paginated API Support
Lumen Defender Threat Feed solution updated with V2 connector using new API v3 endpoint, removing deprecated V1.1 connector entirely. Read More →
Threat Intelligence
Global Secure Access: Enhanced Threat Intelligence Correlation and MCP Monitoring
New analytic rules correlate threat intelligence indicators with GSA traffic while MCP Servers Dashboard provides Model Context Protocol server monitoring. Read More →
New Solution: TacitRed Defender Threat Intelligence Integration
Official TacitRed Defender TI solution from Data443 enables automated sync of compromised credentials to Microsoft Defender Threat Intelligence. Read More →
TacitRed Threat Intelligence Solution: Partner Center Metadata Alignment
TacitRed solution metadata updated for Partner Center publisherId.offerId alignment. Read More →
New Solution: JoeSandbox Threat Intelligence and Malware Analysis Platform Integration
Complete JoeSandbox solution deployment enabling automated malware analysis, threat intelligence feed ingestion, and incident enrichment playbooks for Microsoft Sentinel. Read More →
Check Point Cyberint IOC Connector: Critical Data Ingestion Restoration
Cyberint threat intelligence connector restored from complete ingestion failure caused by malformed API endpoint and duplicate schema nesting blocking IOC data collection. Read More →
Major Solution Release: Cyble Vision and Tropico Solutions Added Plus Multi-Solution Updates
Large release adds two new threat intelligence solutions (Cyble Vision, Tropico) and updates to 15+ existing solutions across the repository. Read More →
Intel471: Added Verity471 Platform Support for Enhanced Malware Intelligence
Intel471 solution now supports the new Verity471 backend alongside Titan for ingesting malware threat indicators. Read More →
New Cyble Vision Threat Intelligence Solution: Comprehensive CCF-Based Alert Platform
Massive new Cyble Vision solution providing 40+ specialized detection rules and parsers for diverse threat intelligence feeds from dark web to cloud security. Read More →
Google Threat Intelligence: Enhanced Threat Hunting with MITRE ATT&CK Integration
Updated threat hunting rules add MITRE ATT&CK mappings and fix parser function calls for improved threat detection coverage. Read More →
NCSC-NL Threat Intelligence Sharing: Playbook Bug Fixes and JSON Structure Improvements
Dutch National Detection Network threat intelligence sharing solution updated to v3.0.1 with playbook parameter fixes and improved JSON structure. Read More →
Open Systems Connector: aiohttp Security Update 3.10.11→3.12.14 Plus Multi-Solution Changes
Open Systems connector updated aiohttp dependency addressing potential security vulnerabilities, bundled with extensive solution packaging updates. Read More →
Threat Intelligence: Critical Logic Fix Stops False Alerts on Revoked Indicators
Broken condition in CloudAppEvents threat intelligence detection fixed to prevent firing on revoked/deleted indicators. Read More →
Threat Intelligence: AppService HTTP Logs Detection Restored After Missing Column Fix
Critical fix for broken IP entity detection rule that was missing AlertPriority column causing template failures. Read More →
CrowdStrike Falcon: Enhanced Threat Intelligence Connector with Improved Error Handling
Updated CrowdStrike Falcon Adversary Intelligence connector with better configuration validation, error handling, and code quality improvements. Read More →
Threat Intelligence Detection: Critical Timing Fix for Cloud App Email Indicators
TI analytic rule query periods reduced from 10 days to 1 hour to prevent false negatives from timing mismatches. Read More →
Feedly Threat Intelligence: Function App Package Fix for Python Dependencies
Critical deployment fix for Feedly Azure Function App requiring proper Python packages structure. Read More →
Lumen Threat Feed Solution: Enhanced Delta Sync and Performance Improvements
Lumen Defender Threat Feed updated to v3.1.0 with migrated delta sync polling logic and improved workbook functionality. Read More →
Threat Intelligence: TAXII Export Connector Added for External Sharing
New TAXII Export connector enables Microsoft Sentinel to share threat intelligence indicators with external TAXII 2.1 servers. Read More →
Google Threat Intelligence: Enhanced Filtering for Threat List Queries
Custom connector updated with filter query parameters for more targeted threat intelligence retrieval. Read More →