Leo understands malware threats

Research and prepare for the latest malware threats without the information overload

Cybersecurity is a game of foresight. It’s a chessboard on which attackers and defenders are constantly looking for checkmate. 

Hackers launch a new ransomware attack every 14 seconds. They’re increasingly more capable and sophisticated. Learning how they plan attacks, what techniques they use, and who they’re targeting, can make you so much better prepared. You’ll save the cost and headache of a cyber assault too. This is especially important considering that the cost of ransomware attacks in the U.S. alone surpassed $7.5 billion in 2019.

But investigating malware threats is tedious. Hundreds of new articles and tweets need to be reviewed and triaged every day. Finding critical threats in that sea of information is time-consuming and overwhelming.

We want to help you streamline your tactical and operational open-source intelligence, so that you can better protect your environment.

That’s why we’ve taught Leo, your AI research assistant, to recognize malware threats. You can ask him to read your security feeds and prioritize what’s relevant to you, your sector, and your environment.

Let’s imagine that you work in a threat intelligence team and are responsible for researching and analyzing the threat landscape. You’re particularly interested in evolving malware threats (including ransomware and malvertisement).

Cut through the noise

You can train Leo to read your Security News feed and prioritize articles related to malware.

Leo prioritizes malware articles in your Security News feed

Leo continuously reads the thousands of articles published in those feeds. It’s an efficient way to cut through the noise and keep up with the evolving malware landscape without the overwhelm.

You’re in control

Leo has been trained to understand broad topics like malware, as well as hundreds of specific malware types like malvertisement, ransomware, adware, bots, rootkits, spyware, etc.

Asking Leo to prioritize malware in your Security News feed is as simple as creating a new Topic priority and selecting ‘malware’ as the topic.

Ask Leo to prioritize malware threats in your Security News feed

You can combine topics with +AND and +OR and create even more targeted priorities for Leo. For example, use +AND to focus on malware related to Android or top companies in your sector.

Refine the priority to malware and Android

You can also ask Leo to look for a specific type of malware like malvertisement or ransomware.

Prioritize ransomware threats

Continuously learning and getting smarter

Leo is smart. He continuously learns from your feedback. When Leo is wrong, you can use the ‘Less Like This’ down arrow button to let him know that an article he’s prioritized isn’t about malware.

Let Leo know when he’s wrong

Break down silos

Bring your research team into the picture. They can create a Threat Intel Report Board and save the most critical insights they discover in their Feedly. Then everyone with the same Board can leave notes and highlight the biggest threats. 

We’ve seen teams create tactical and operational Boards. For instance, a Vulnerability Report can be built up with information for those that deal with security procedures, while strategic CISO Newsletters can keep management up to speed about malware and your planned response.

Articles bookmarked in a Board can be shared with the rest of the team via daily newsletters, Slack and Microsoft Teams notifications, or pushed to other apps using the Feedly Cybersecurity API.

Share the threat intelligence you collect in Feedly with other teams and apps

Streamline your open-source intelligence

We’re excited to see how your security team will declutter your feeds and dig deeper into the critical threats that matter to you. Sign up today and discover Feedly for Cybersecurity.

If you’re interested in learning more about Leo’s roadmap, you can join the Feedly Community Slack channel. 2020 will be a thrilling year with new skills and bold experiments!

Leo understands threat actor groups

Research threat actor groups and learn more about their tactics, techniques, and procedures without the overwhelm

Cyber attacks continue to wreak havoc around the world. The actors waging these wars don’t just care about fraud either. They’re part of criminal organisations. Foreign governments stealing data for defense or national interests. Even terrorists or activists driven to disrupt and cause harm. 

What’s more, they’re increasingly capable and sophisticated. It’s a growing threat that can strike anyone at any time.

When you learn about threat actors’ tactics and motivations, you can better prepare against them, saving you the costs and headaches that come with a breach or attack. 

But there’s so much content to wade through when investigating these threat actors. It’s like fishing blind in an ocean. You’ll never know what’s coming back on the hook. More time and stress is spent on finding information about the threat, rather than acting on it. You can be overwhelmed. 

We’re passionate about helping you refine and streamline your open-source intelligence. That’s why we’ve taught Leo, your AI research assistant, to recognize threat actor groups. He can find them in your Feedly security feeds, prioritizing articles related to the actors and sectors you care about.

Let’s imagine that you work in the telecommunications sector, and you’re researching the tactics and motivations of MuddyWater, an Iranian threat actor group.

Cut through the noise

You can train Leo to read all your cybersecurity, foreign affairs, and cyber warfare sources, and prioritize articles related to MuddyWater.

Prioritize a threat actor

Leo continuously reads the articles in your feeds and prioritizes the ones that mention MuddyWater (or any of its aliases). It’s a powerful and effective way to keep up with their latest techniques, tactics, and procedures.

You’re in control

Leo has been trained to recognize all the threat actor groups referenced by the MITRE ATT&CK framework. This is a list of common names for hacking groups, as recognized by the global security community.

Asking Leo to prioritize MuddyWater in your security feed is as simple as creating a new Topic priority and selecting ‘MuddyWater’ as the topic.

Enter a threat actor alias in the topic field

When you prioritize MuddyWater, Leo will also look for other synonyms for that group like Seedworm and TEMP.Zagros.

You can combine topics with +AND and +OR to create even more targeted priorities for Leo. For example, use +AND to combine an actor group with an attack vector or a sector. This narrows his focus further so you find exactly what you’re looking for.

Continuously learning and getting smarter

Because Leo is integrated with the MITRE ATT&CK framework, it’s continuously learning and getting smarter. As new groups or aliases are identified, they’ll be automatically updated in your Feedly.

Leo recognizes threat actor groups listed on the MITRE ATT&CK framework

Break down silos

As you search and discover new content, share insights with your research team. Together, you can create a Threat Intel Report Feedly Board and bookmark the most critical insights you discover. You can also add notes and highlights about why a threat is high-priority.

We’ve already seen security teams create tactical Boards, such as a Vulnerability Report, to share with their operations experts. You might also want to build a CISO Newsletter to keep your management updated. It’s all possible within Feedly.  

Articles bookmarked in a Board can be shared with the rest of the team via daily newsletters, Slack or Microsoft Teams notifications, or pushed to other apps using the Feedly Cybersecurity API.

Share the threat intelligence you collect in Feedly with other teams and apps

Streamline your open-source intelligence

We’re excited to see how your security team will declutter your feeds and dig deeper into the critical threats that matter to you. Sign up today and discover Feedly for Cybersecurity.

If you’re interested in learning more about Leo’s roadmap, you can join the Feedly Community Slack channel. 2020 will be a thrilling year with new skills and bold experiments!

Leo Understands COVID-19

Look beyond the big headlines. Leo can show you exactly what’s happening to your industry as a result of COVID-19, or filter it out.

Coronavirus news is everywhere right now. It’s not so much a wave of information as an ocean. It’s easy to get overwhelmed or miss a crucial market development. 

Or maybe you want to cut out the COVID-19 content altogether so you can find out what else is happening around the world. 

So we’ve taught Leo, your AI research assistant, how to help.

Mute or prioritize COVID-19 in your Feedly

Leo can already learn what you like to see and refine your Feedly. Now, he can mute or prioritize COVID-19 as well. And he does it across tens of millions of trusted sources. 

It works just like Leo’s other prioritization parameters such as keywords, topics, and events. ‘Coronavirus’ and ‘COVID-19’ are just two of the terms he recognizes. Leo takes into account a variety of the virus’s other names, too, like SARS-CoV-2. 

Leo prioritizes mentions of COVID-19 and its wide variety of aliases

Once you give Leo a priority, you’ll get a specific view of how your industry is reacting to the pandemic. Then just save the most interesting publications in your Feedly Board. 

You can mute or prioritize one feed, or every feed, and those feeds can be personal or spread across your team. It lets some team members focus on COVID-19 news if they need to, while others look beyond it. 

Here’s a few examples to show how Leo’s coronavirus filter might work for you. After all, the virus is impacting every sector, whether you’re in retail, cyberspace, automotive or pharmaceuticals…

COVID-19 and biopharma

You’re a drug development director looking for news and insight around cardiovascular disease, and how COVID-19 is affecting this research. 

Let’s imagine you have a Cardiology feed in Feedly, and you’re following multiple science and medicine journals. Hit ‘Train Leo’ in the top left toolbar. You can prioritize COVID-19 subjects by entering it as a topic.

Preview the prioritized COVID-19 articles in your Cardiology feed

The publications displayed are now all about coronavirus and cardiology. 

Refine the search further with +AND or +OR. Here’s some more information about Leo’s topic combinations.

COVID-19 and cybersecurity

You’re part of a large tech company. Security threats may have emerged during the pandemic, buried by the noise online. 

Do the exact same thing. Click ‘Train Leo’ and enter COVID-19 as the topic.

Preview the prioritized COVID-19 articles in your Threat Research feed

You can see the most recent coronavirus-related publications from your sources in the preview. Choose whether to filter by Entire Content or titles that explicitly contain COVID-19 or its aliases.

New threats to your business can then be spotted and prepared for.

COVID-19 and retail

You’re a business intelligence analyst searching for COVID-19’s effects on stores and brands around the globe. Retail, one of the most disrupted sectors, is under intense scrutiny. The prioritization feature can help here too. 

With a Retail feed, you’ll preview countless pieces of content that tackle this subject. 

Again, just create a Leo priority around COVID-19.

Preview the prioritized COVID-19 articles in your Retail feed

And that’s it. You have a feed at the intersection of two subjects, with plenty of room for more priorities and further refinement.

Muting COVID-19

You might want to look past COVID-19 instead, and keep it out of your feeds. 

Muting is just as easy. Click ‘Train Leo’ and scroll to ‘Mute Filters’. Type in COVID-19. You’ll see a message asking which Feedly feeds you want to remove it from.

Here’s how it looks in a Tech feed. 

Preview the muted COVID-19 articles in your Tech feed

No more content on the topic will turn up in your Feedly, as long as the mute is active. It’s one of 1,000 pre-trained topics that Leo can mute right away.

Train Leo to prioritize or mute COVID-19 now

Whatever happens with coronavirus and your market, the trusted insights are here. Leo makes sure you’re never overwhelmed or struggling to see the big picture.

If you’re interested in learning more about Leo’s roadmap, join the Feedly Community Slack channel. 2020 will be a challenging year, but by staying informed, you can respond better and remain in control.