15-Second summary

CTI analysts must identify relevant cyberattacks within minutes of public reporting, quickly assess their impact and relevance, collect actionable intelligence, and inform stakeholders.

The new Cyberattack Agent and Insights Cards utilize AI, powered by a real-time Threat Graph, to provide you with attack data and the relevant context in a single view, enabling quick analysis and custom reporting.

• Discover and track cyberattacks faster with real-time updates: >10,000 OSINT sources, including SEC filings and regional stock exchanges.
• Get full attack context: Attack summary, timeline, threat actors, malware, IoCs, TTPs, and CVEs, all powered by the real-time Feedly Threat Graph.
• Zero in on cyberattacks that matter with precision filtering: Industry, country, attack type, actors, malware, filters, and third-party lists.
• Rapidly create attack reports: Open a Cyber Attack Insights Card to get full details, and create a custom report with Ask AI.

The Cyberattack Agent enables you to be the first to know about relevant attacks, spot patterns, and prioritize your analysis. Now you can go from discovery to analysis to actionable intelligence within minutes.

The challenge

CTI teams face an overwhelming challenge: quickly identifying relevant cyber attacks from thousands of daily reports scattered across disparate sources.

Unfortunately, it’s easy to get caught up reading about attacks that prove to be irrelevant to your organization. It’s also easy to miss an attack that appears in a source you didn’t check. The result? Teams struggle to distinguish routine incidents from attacks that could directly impact their organization's infrastructure, supply chain, or industry vertical.

The Solution

Feedly's new Cyberattack Agent and Insights Cards are built on Feedly’s Real-Time Threat Graph and powered by AI to aggregate attack data from thousands of sources and present the full context in a unified view. Analysts can rapidly analyze attacks and create actionable reports in minutes.

Discover and track cyberattacks faster with real-time updates

The Cyberattack Agent continuously monitors thousands of OSINT sources, ranging from security publications to SEC filings and regional stock exchanges, where breach disclosures typically emerge first. The data is extracted by Feedly AI into the Threat Graph, adding context to the data and ensuring you're among the first to know when attacks impact your industry or supply chain partners.

The “What? So What?” column helps you immediately understand not only what happened, but often, who was behind it, how they operated, and what to watch for. It gives you the Bottom Line Up Front (BLUF). Combined with the integrated trends, you can quickly assess whether you're seeing isolated incidents or the beginning of a coordinated campaign.

Get full attack context

Instead of piecing together attack details from multiple sources, you get the complete context in one view. Each attack entry provides the essential intelligence elements you need for rapid assessment (all enriched by Feedly’s Threat Graph):

• attack summary
• timeline
• threat actors
• associated malware families
• IoCs
• TTPs
• relevant CVEe

This eliminates the time-consuming process of cross-referencing different databases and threat feeds to build a thorough picture.

Zero in on cyberattacks that matter with precision filtering

The Agent's precision filtering enables you to cut out the noise and focus on what truly matters to your security posture by narrowing results based on industry, country, attack type, threat actor, and malware family. The filtering helps ensure your analysis time is spent on threats with genuine relevance to your organization, rather than generic attacks that have no bearing on your risk profile.

Custom lists allow you to create targeted monitoring for your critical suppliers, partners, and service providers. You can use them to filter attacks targeting companies or products in your supply chain, providing the visibility needed to assess potential downstream impacts on your operations and protect your extended attack surface. In this example, we added a Custom List of our company’s tech stack to the filter.

Dive deeper and create attack reports

Click into any attack to view the Cyberattacks Insights Card, a comprehensive intelligence view structured to support quick reporting and dissemination. These cards consolidate all available information about a specific incident that has been collected and correlated in the Real-Time Threat Graph, including a summary, victims, IoCs, trends, and supporting articles. The timeline can be especially helpful, showing details about the initial compromise, techniques used, recovery details, and legal repercussions.

One more thing: Quickly create flash reports

Ask AI enables you to generate custom reports tailored to your stakeholders' needs, whether you're briefing leadership on strategic implications or providing technical teams with actionable IOCs. You can create reports in seconds using expert-suggested prompts or your own custom prompts. Reports include citations to sources, allowing you to quickly verify the information and providing a historical record of your evidence-based assessment.

You can create a flash report that summarizes risks and business impact in just a few seconds.

You can customize your reports to generate the response you need. For instance, you can create an incident report that includes the Diamond Model of Intrusion Analysis, timelines, and other relevant details.

Prompt

Create an incident report.

Include:
1. Executive Summary (<300 characters)
2. Diamond Model of Intrusion Analysis
3. Indicators of Compromise (IOCs)
4. Event Analysis (mermaid chart)
5. Business and Industry Impact
6. Recommended Actions & Next Steps

Summary

The new Cyberattack Agent and Insights Cards eliminate the manual, time-intensive process of tracking and analyzing cyber threats across disparate sources. With precision filtering, third-party monitoring, trend visualization, and streamlined reporting via Ask AI, you can cut through the noise and create actionable reports, reduce stress, and shift from reactive to proactive intelligence operations.