Threat Intelligence

Use Feedly to Track Vulnerabilities Affecting Your Supply Chain

Relevant, real-time threat intelligence based on your vendor list

Cybersecurity vendor risk management (VRM) is notoriously difficult. Security teams need to know when their vendors experience a security incident, but they often lack visibility into supply chain threats.

Many companies only learn about a security incident when the vendor notifies them. Meanwhile, as soon as threat actors know about a vulnerability, they start acting on that knowledge, which leaves you increasingly vulnerable.

Additionally, not every vulnerability affects your security, and not every vulnerability affects your security equally. You need meaningful, real-time insight into the high risk threats facing your company and supply chain vendors.

With Feedly for Cybersecurity, you can create Feeds tailored to your technology stack and supply chain, including hardware, software, and firmware for streamlined monitoring enabling proactive remediation. Unlike keyword matching, Feedly AI uses artificial intelligence to recognize key information so that you never miss important information. You can also share this focused risk intelligence with industry peer groups like Information Sharing and Analysis Centers (ISACs) or team members using email, messaging applications, and the Feedly API.

Reduce the noise with a Feed focused on your supply chain risks

Threat researchers use many different intelligence tools. Whether getting data from a managed services provider (MSP), setting news alerts, following social media, or collecting cybersecurity newsletters, the time and information overload is overwhelming. To reduce noise, you might be setting alert emails to come in once a day. However, filtering through all those emails is time-consuming and overwhelming. On top of this, once you find a nugget of valuable information, you need to do independent research to get the details you need to protect your company, and you need them quickly.

We trained Feedly AI to understand cybersecurity and critical vulnerabilities to synthesize all the information you need. Training Feedly AI by setting Priorities based on your vendor list lets you teach him to focus on only what you need to secure your environment information. Priorities help you teach Feedly AI about the risks unique to your supply chain, whether it’s hardware, software, or a non-technology business partner.

By customizing your Feed using Feedly AI and Priorities, you fine-tune your threat intelligence and build visibility around risk criticality.

Creating dashboards around the threat intelligence you need

Feedly AI knows cybersecurity, and you can teach it to know your supply chain risk, too. With the CVE Dashboard, you get at-a-glance, real-time visibility into:

• CVSS score and vector string
• CWE
• Affected systems, including vendor advisories
• Exploit information
• Patches
• Associated malware families
• Associated threat actors
• Awareness graph
• Number of Web and Social Media mentions, including Twitter and Reddit

Teach Feedly AI which vendors to track

More than just reducing the noise, Feedly AI streamlines threat intelligence research with visualizations that help you prioritize your organization’s risk.

In your Today feed, you’ll see a list of recent, critical vulnerabilities for at-a-glance visibility into new threats facing your technology stack.

When you click on the vulnerability, you’ll see a color-coded awareness graph for at-a-glance visibility into what people are saying about a specific CVE.

The clickable boxes direct you to more information about the vulnerability, including:

• threat actors
• malware families
• affected systems
• available patches

By training Feedly AI and setting Priorities, you get focused threat intelligence giving you the visibility you need and enabling you to respond more rapidly to new threats. This visibility improves key cybersecurity metrics like reducing mean time to detect (MTTD) and mean time to remediate (MTTR).

For example, one customer in the energy industry used Priorities alerting them to a new vulnerability so that they could patch the problem within two days, rather than having a security weakness that could lead to a data breach.

Set Priorities to focus your feed

Setting Priorities to teach Feedly AI about your critical supply chain risks is an intuitive process.