Threat Intelligence

The MDR company reported a rise in attacks last year that used VPN gateways, RMM tools, and fake CAPTCHA scams to gain initial access.

Iran-linked attacks target MSSP tools and access paths, making fast detection and containment critical as recovery becomes less certain.

By feeding real-time edge telemetry into AI-driven SIEM workflows, the integration aims to reduce alert noise, speed up response, and give security teams a more unified way to operate across environments.

Dataminr’s new platform feeds client-specific threat context and business risk into existing SOC tools, helping MSSPs reduce investigation time, standardize response across tenants, and shift toward outcome-driven security services

New native capability in the Cato SASE Platform uses long-term behavioral correlation and adaptive enforcement to contain threats earlier and reduce SOC workload.

The integration embeds external threat exposure into daily SecOps workflows, giving MSSPs earlier risk visibility and a faster, standardized path from detection to credential and identity remediation.

Flare is gaining momentum with MSSPs looking to consolidate and streamline threat intel services.