topic Re: Credit Unions - Threat Intelligence in Threats

Credit Unions - Threat Intelligence

CardTech — Mon, 09 Oct 2023 09:10:59 GMT

Hello all you who are Credit Union security Gurus. I am looking to see how many of you participate in some sort of Threat Intelligence sharing and how you go about passing relevant IoC's back and forth. Thanks.

Re: Credit Unions - Threat Intelligence

CardTech — Fri, 19 Apr 2019 20:13:42 GMT

We identify any URL, IP or Hash that is not caught by our other security products and pass this information into our threat feed to share with others. All of the major players are part of the Cyber Threat Alliance, so if they didn't catch it, I like to think that its worth adding to our own personal threat feed and sharing with others.

Re: Credit Unions - Threat Intelligence

AlecTrevelyan — Sat, 20 Apr 2019 05:58:13 GMT

The CTA members use STIX to share information between themselves:

https://www.cyberthreatalliance.org/what-we-do/

Info on STIX (and TAXII and CybOX) can be found here - these are the industry standards for sharing threat intelligence:

https://www.us-cert.gov/Information-Sharing-Specifications-Cybersecurity

Re: Credit Unions - Threat Intelligence

CraginS — Sun, 21 Apr 2019 14:28:01 GMT

@CardTech wrote:
Hello all you who are Credit Union security Gurus. I am looking to see how many of you participate in some sort of Threat Intelligence sharing and how you go about passing relevant IoC's back and forth. Thanks.

Credit unions are part of the financial sector and should be involved with the range of security support activities in that sector. The key organization for just what you are seeking is teh FS-ISAC.

Financial Services Information Sharing and Analysis Center (FS-ISAC)

Other resources support the financial services sector, too.

DHS on the Financial Services Sector

Protecting Financial Institutions Against Cyber Threats: A National Security Issue (Carnegie Endowment)

Intelligence and National Security Alliance (INSA) on Financial Sector Security

The above list is far from exhaustive.

http://bfy.tw/NJyc