https://cybertoolchain.io/tools/feedly-threat-intelligence New releases and features in Feedly Threat Intelligence, tracked by The Cyber Toolchain. en Tue, 27 Oct 2026 18:00:00 GMT https://feedly.com/new-features/posts/credential-leaks-dark-web-agent-1-0 https://feedly.com/new-features/posts/credential-leaks-dark-web-agent-1-0 Tue, 27 Oct 2026 18:00:00 GMT Feedly launches Credential Leak Dark Web Agent to monitor exposed corporate email domains across dark web, Telegram, Discord, and data leaks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the Credential Leak Dark Web Agent, monitoring up to five email domains per agent (including subsidiaries and acquisitions) across Tor, I2P, ZeroNet, OpenNIC, Telegram, Discord, IRC, FTP, and named data leak collections, checking for new matches every 24 hours.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports exporting the Insights Card credential table as CSV (with passwords, if present) or retrieving findings and Insights Card content — including passwords — through the Feedly API. • Adds password-policy filtering to hide leaks where no password meets the organization's complexity requirements, reducing noise from non-compliant credentials. • Adds Credential Leaks Insights Cards showing affected email-and-password pairs, source excerpts, `First seen` and `Status` (New or Recycled) fields, and links to associated Threat Actor Insights Cards and Cyberattack Insights Cards. • Adds a Trends & Visualizations tab showing how findings change over time, their sources, and which accounts appear most frequently. • Includes findings in Automated Newsletters (without passwords) or via Feedly API (with passwords if present) for distribution to IAM, SOC, SOAR, or TIP tooling. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/org-profile-1-0 https://feedly.com/new-features/posts/org-profile-1-0 Tue, 29 Sep 2026 15:00:00 GMT Feedly Threat Intelligence adds Org Profile, letting teams capture company context and reference it via @ in AI prompts for tailored risk assessments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Org Profile`, a shared team workspace to capture organizational context — including `Company overview`, `List`, `Vendor list` (add-on), `Audience`, `Tradecraft`, and `Tech stack` (beta) item types — that Feedly AI uses alongside threat intelligence to produce organization-specific assessments.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports importing `List` items from `.csv` files and text items from `.md` (Markdown) files, with `Vendor list` supporting up to 1,000 companies. • Enables `@` references to Org Profile items inside AI prompts (Ask AI, Intel Agents, Report Builder, Automated Newsletters) to inject saved context without re-pasting it each run. • Allows `Org Profile` list items to be used as filters in AI Feed, scoping collection to tracked suppliers, threat actors, or technologies. • Adds `Tech stack` (beta) item type to capture product names and versions, enabling vulnerability advisories to be assessed against an organization's specific technology footprint. • Adds `Vendor list` add-on item type to capture suppliers and partners for third-party incident impact assessment. • Adds `Tradecraft` item type to encode sourcing rules, confidence-stating conventions, fact/assessment separation, risk-scoring criteria, and follow-up team routing into reusable prompt context. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/pivot-from-an-ip-ioc-to-live-host-data-in-censys https://feedly.com/new-features/posts/pivot-from-an-ip-ioc-to-live-host-data-in-censys Thu, 17 Sep 2026 16:36:00 GMT Feedly IoC Insights Cards now link directly to Censys host data for one-click IP pivot without leaving the platform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds an 'Open in Censys' button to IoC Insights Cards, enabling one-click pivot from a flagged IP to live Censys host data including open ports, running services, TLS certificates, ASN, and hosting provider.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Extends the 'Open in Censys' pivot to the IoC table on Threat Actor and Malware Insights Cards, so analysts can pivot from a full IoC list without opening each individual card. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/automatically-collect-splunk-hunting-queries-that-match-your-requirements https://feedly.com/new-features/posts/automatically-collect-splunk-hunting-queries-that-match-your-requirements Tue, 25 Aug 2026 20:40:00 GMT Feedly Threat Intelligence auto-collects Splunk Hunting Queries (plus Sigma, YARA, Suricata, Snort, KQL) via a new AI Model and API. • Adds a Splunk Hunting Queries AI Model that continuously extracts and surfaces SPL queries from articles across 5,000 vetted CTI sources, vendor blogs, threat reports, and GitHub repositories. • Supports programmatic retrieval of collected hunting queries via the API for direct integration into detection pipelines. • Extends detection rule recognition to six formats: Splunk SPL, Sigma, YARA, Suricata, Snort, and KQL (Microsoft Defender and Sentinel), covering network traffic inspection, file and malware matching, and log-based detection. • Adds CVE Insights Card integration — when a CVE has an associated Splunk Hunting Query, it can be downloaded directly from the card alongside the source article context. • Allows pairing multiple AI Models in an AI Feed to narrow collected queries to specific topics, threats, or malware families. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/continuously-collect-suricata-rules-matching-your-requirements https://feedly.com/new-features/posts/continuously-collect-suricata-rules-matching-your-requirements Wed, 19 Aug 2026 16:48:00 GMT Feedly Threat Intelligence adds a Suricata Rules AI Model to continuously collect, filter, and export detection rules from open-source reporting. • Adds a new Suricata Rules AI Model that can be paired with an AI Feed to automatically collect articles containing Suricata rules from 5,000 vetted CTI sources and repositories as new reporting is published. • Enables export and programmatic API pull of extracted Suricata rules directly into detection pipelines, IDS, or SIEM tooling. • Extends detection rule AI Model coverage to six formats — Suricata, Sigma, YARA, Snort, Splunk, and KQL-based Hunting Queries for Microsoft Defender and Sentinel — spanning network traffic inspection, file and malware matching, and log-based detection. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog https://feedly.com/changelog Tue, 11 Aug 2026 15:43:36 GMT Feedly Threat Intelligence adds Ask AI Analyze/Research to Custom Intel Agents and Censys lookup to IP Insight Cards • Custom Intel Agents now support Ask AI Analyze and Research actions, enabling AI-driven analysis and research workflows within agent configurations. • IP Insight Cards gain a Censys lookup, surfacing Censys data directly in the IP context panel. • Report Builder adds a progress indicator during generation, making long-running report creation more transparent. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/enrich-and-triage-atlassian-security-releases-in-the-vulnerability-intel-agent https://feedly.com/new-features/posts/enrich-and-triage-atlassian-security-releases-in-the-vulnerability-intel-agent Fri, 07 Aug 2026 00:39:00 GMT Feedly Vulnerability Intel Agent now ingests Atlassian security releases within minutes, with CVE filtering by attack path, product, and patch policy. • Adds a "Latest Atlassian Security Release" filter in the Vulnerability Intel Agent that always points to the most recent Atlassian advisory, eliminating manual updates each cycle. • Supports filtering Atlassian CVEs down to specific products in your stack (e.g., Confluence Data Center, Sourcetree, Jira) to surface only relevant exposures. • Supports filtering by attack path — attack vector, privileges required, and user interaction — to isolate unauthenticated, no-interaction reachable CVEs. • Supports filtering by patch policy thresholds: CVSS score cutoffs, EPSS probability cutoffs, or both combined. • Alerts available when new CVEs match configured filters via deployed Intel Agent. • Vendor advisory support in the Vulnerability Intel Agent now includes Adobe, Android, Apache, Apple, Microsoft, Oracle, and Atlassian. • Enrichment columns in the output table are reorderable and individually showable or hidable to match team triage workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog https://feedly.com/changelog Mon, 27 Jul 2026 16:29:13 GMT Feedly Ask AI gains SPL query generation and an improved threat actor campaign detection model alongside KQL support. • New Ask AI model tuned specifically for threat actor campaign detection. • Adds SPL (Splunk Processing Language) hunting query generation to Ask AI, complementing existing KQL support. • Improves MITRE ATT&CK tagging accuracy in Ask AI results. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/apple-security-releases-vulnerability-intel-agent https://feedly.com/new-features/posts/apple-security-releases-vulnerability-intel-agent Tue, 21 Jul 2026 18:43:00 GMT Feedly's Vulnerability Intel Agent now ingests Apple security releases within minutes, with enrichment and filtering by exploitation, product, and patch policy. • Adds Apple security release ingestion to the Vulnerability Intel Agent, with each CVE appearing in the output table within minutes of publication. • Supports filtering CVEs by exploitation activity (exploited, PoC, weaponized, CISA KEV) to surface the highest-priority items from a release. • Enables product-level filtering so practitioners can scope a release to only the Apple products they actually run (e.g., macOS only). • Supports threshold-based patch policy filters on CVSS score and EPSS probability to automatically surface CVEs that breach SLA triggers. • Adds a 'Latest Apple Security Release' filter option that always points to the most recent Apple advisory. • Supports alert deployment on the Intel Agent to notify when new CVEs from a release match configured filters. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/triage-indicators-faster-with-virustotal-verdicts-in-feedly https://feedly.com/new-features/posts/triage-indicators-faster-with-virustotal-verdicts-in-feedly Tue, 07 Jul 2026 22:50:00 GMT Feedly now embeds VirusTotal verdicts, WHOIS, certs, and reputation scores directly inside IoC Insights Cards. • Adds VirusTotal integration: connect your existing VirusTotal API key to surface detection verdicts and reputation scores inside IoC Insights Cards. • Embeds WHOIS records, certificate data, network attribution, and community votes on IoC Insights Cards for zero-detection domain analysis. • Enables one-click pivot from an IoC Insights Card directly to the full VirusTotal dataset for deeper investigation. • VirusTotal enrichment data remains account-scoped — never stored by Feedly and never shared with other users or teammates. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/suricata-detection-rules-ask-ai-research-playground-and-more https://feedly.com/changelog/suricata-detection-rules-ask-ai-research-playground-and-more Wed, 24 Jun 2026 23:13:00 GMT Suricata rules in Insights Cards, Ask AI Playground, @reference snippets, new State-sponsored actor model • Adds access to Suricata detection rules extracted from articles via the Detection Rules section of Insights Cards • Introduces the Ask AI Research Playground for self-serve threat intelligence exploration • Enables creating reusable text/Markdown snippets in Org Profile and pulling them into prompts using @reference across Ask AI, Report Builder, and Intel Agent • Adds a new AI Model: State-sponsored threat actors Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/track-exploit-types-oracle-and-atlassian-advisories-and-more https://feedly.com/changelog/track-exploit-types-oracle-and-atlassian-advisories-and-more Wed, 10 Jun 2026 22:04:00 GMT Feedly adds Atlassian/Oracle filter, PoC model split, Talos/Atlassian/Apache/Google OSV sources, and improved Ask AI.148 • Adds `Proof of Exploit` model to distinguish PoC code from active exploitation. • Adds `Atlassian` and `Oracle` security updates under the `Security Update Releases` filter in the Vulnerability Agent. • Adds 5 new advisory sources: Talos, Symphony, Atlassian, Apache, and Google OSV. • Enriches Ask AI responses with intel profile context. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/feedly-opencti-put-real-time-open-source-intel-into-your-knowledge-graph https://feedly.com/new-features/posts/feedly-opencti-put-real-time-open-source-intel-into-your-knowledge-graph Thu, 28 May 2026 23:04:00 GMT Feedly Threat Intelligence adds an OpenCTI connector that pushes STIX 2.1 bundles directly from AI Feeds • Adds a new OpenCTI connector to automatically push STIX 2.1 bundles from Feedly AI Feeds to the OpenCTI knowledge graph • Enables automated extraction of threat actors, TTPs, malware, CVEs, and IoCs from 5,000 open sources into structured STIX entities with mapped relationships Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/smarter-insider-threat-detection-broader-search-coverage-and-more https://feedly.com/changelog/smarter-insider-threat-detection-broader-search-coverage-and-more Wed, 27 May 2026 18:38:00 GMT Feedly adds 'Any Language' search filter and rebuilt Insider Threats AI model. • Adds `Any Language` option to Article Search language filter for unrestricted coverage • Rebuilds Insider Threats AI Model as semantic topic model with three new core categories • Added 4 new vendor advisory sources: Node.js, Ruby, cPanel, OpenVPN Access Server • Adds CVE status field to show rejected or reserved CVEs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/feedly-best-practices-for-cti-teams https://feedly.com/new-features/posts/feedly-best-practices-for-cti-teams Tue, 19 May 2026 16:24:00 GMT Feedly introduces Intel Agents, Ask AI, Report Builder, and MISP integration for CTI teams. • Adds `Vulnerability Intel Agent` for personalized CVE monitoring filtered by vendor, product, and attack vector • Adds `Cyberattack Intel Agent` to monitor real-time attack activity targeting specific industries • Adds `TTP Intel Agent` to track trending ATT&CK techniques and launch into MITRE ATT&CK Navigator • Adds `Ask AI` capability on top of Intel Agents, Insights Cards, and AI Feeds for synthesis and IOC extraction • Adds `Insights Cards` providing structured context on CVEs, Cyberattacks, Threat Actors, and IoCs • Adds `Report Builder` that extracts sections from templates and auto-populates them with sourced claims • Adds support for `MISP` as an integration destination for enriched feed data Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/enrich-indicators-faster-with-greynoise-context-built-into-ioc-insight-cards https://feedly.com/new-features/posts/enrich-indicators-faster-with-greynoise-context-built-into-ioc-insight-cards Thu, 14 May 2026 16:22:00 GMT Feedly Threat Intelligence adds GreyNoise classification signals directly inside IoC Insight Cards for in-platform enrichment. • Surfaces GreyNoise behavioral and classification signals alongside OSINT in IoC Insight Cards Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/leverage-sharper-cyberattack-clustering-greynoise-and-virustotal-enrichment-apple-security https://feedly.com/changelog/leverage-sharper-cyberattack-clustering-greynoise-and-virustotal-enrichment-apple-security Wed, 13 May 2026 18:22:00 GMT New Analyst1 integration pulls Feedly data via STIX 2.1; IoC cards get GreyNoise/VirusTotal enrichment; Vulnerability Agent tracks Apple updates. • Pulls threat intelligence from Feedly Folders, AI Feeds, or Team Boards into Analyst1 as structured evidence via STIX 2.1 output. • Surfaces contextual threat intelligence from GreyNoise and VirusTotal in IoC Insights Cards via the Integrations page. • Includes Apple security updates under the Security Update Releases filter in the Vulnerability Agent. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/discover-patterns-across-100-cyberattacks-with-ask-ai-in-the-cyberattack-agent https://feedly.com/new-features/posts/discover-patterns-across-100-cyberattacks-with-ask-ai-in-the-cyberattack-agent Wed, 06 May 2026 17:27:00 GMT Ask AI added to Cyberattack Intel Agent allows custom prompts across up to 100 attacks. • Adds `Ask AI` capability within the `Cyberattack Intel Agent` allowing analysts to run custom AI prompts against threat data. • Enables running custom queries across up to 100 cyberattacks at once in the Cyberattack Intel Agent. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/analyze-cyberattacks-with-ai-explore-our-new-ti-page-and-more https://feedly.com/changelog/analyze-cyberattacks-with-ai-explore-our-new-ti-page-and-more Wed, 29 Apr 2026 22:55:00 GMT Feedly Threat Intelligence adds Ask AI to Cyberattack Agent and a new TI landing page. • Enables CTI analysts to run 'Ask AI' queries directly within the Cyberattack Agent workflow to assess threat actors and map activity. • Launches a redesigned Feedly Threat Intelligence landing page at feedly.com/threat-intelligence for overviewing platform capabilities. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/navigate-faster-with-go-to-tailor-your-alerts-with-custom-summaries-and-translate-newsletters-in https://feedly.com/changelog/navigate-faster-with-go-to-tailor-your-alerts-with-custom-summaries-and-translate-newsletters-in Wed, 15 Apr 2026 22:07:00 GMT Add Go To navigation, custom Slack/Teams alert summaries, newsletter translation, and new IoC/CVE search features • Adds 'Go To' (Cmd+K) for instant navigation to resources by actor, malware, vulnerability, or IoC • Enables custom summaries in Feedly’s integrations for Slack and Microsoft Teams to control focus, format, and detail level of article notifications • Adds 'Translate articles to English' button in Newsletter Design for one-click automatic translation • Enables searching by victim state in the Cyber Attack agent • Adds EUVD sections to CVE Insights Card Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/navigate-feedly-faster-with-go-to https://feedly.com/new-features/posts/navigate-feedly-faster-with-go-to Tue, 07 Apr 2026 23:17:00 GMT Feedly adds 'Go To' global search via Cmd+K to jump to Insights Cards, Intel Agents, AI Feeds, and Boards • Adds `Go To` command launched via `Cmd + K` (Mac) or `Ctrl + K` (Windows) to instantly search and navigate to threat intelligence assets. • Enables direct navigation to any Insights Card for threat actors, malware families, CVEs, or cyberattacks through the new search interface. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/add-specific-context-to-your-market-intelligence-queries https://feedly.com/changelog/add-specific-context-to-your-market-intelligence-queries Thu, 02 Apr 2026 00:54:00 GMT Feedly Threat Intelligence adds US state filtering to Cyber Attack Agent API, combined V&A queries, and expands coverage with 7 new actors. • Adds US state filtering capability to the Cyber Attack Agent API for geographically specific threat intelligence queries • Extends EUVD classification support to CPE search operations within the Threat Intelligence service • Introduces 7 new threat actor profiles to the Feedly Threat Intelligence database • Enables Ask AI to process combined Vulnerability and Cyber Attack Agent queries in a single interaction • Improves 55 existing TTP detections, including enhanced coverage for T1204.004 (ClickFix) tactics Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/deliver-intel-faster-via-ms-teams-detect-never-before-seen-techniques-and-more https://feedly.com/changelog/deliver-intel-faster-via-ms-teams-detect-never-before-seen-techniques-and-more Wed, 18 Mar 2026 17:51:00 GMT New Microsoft Teams integration with dedup/summarization and Novel TTPs AI model for detecting first-seen techniques • Microsoft Teams integration now available on the Microsoft Marketplace with built-in deduplication, AI-generated summaries, and automatic translation. • New 'Novel TTPs' AI Model in AI Feeds detects articles documenting attack techniques observed for the first time. • New AI Model for IOC file paths launched to identify file path indicators of compromise. • Articles now display a structured IoC list at the top, with new IoC Insights Card accessible from inline mentions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/get-threat-intelligence-to-your-team-fast-in-the-tools-they-already-use https://feedly.com/new-features/posts/get-threat-intelligence-to-your-team-fast-in-the-tools-they-already-use Tue, 17 Mar 2026 22:25:00 GMT Updated Feedly-Microsoft Teams integration with deduplication, AI summaries, and auto-translation • `@Feedly manage` command in MS Teams channels to control integration settings including deduplication toggles. • Automatic deduplication of articles from `Team AI Feeds` sent to Microsoft Teams channels. • AI-generated summaries included in notification payloads for rapid relevance assessment. • Automatic translation of article titles and summaries into English via `Multilingual` plan support. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/analyze-your-closed-source-intelligence-in-feedly https://feedly.com/new-features/posts/analyze-your-closed-source-intelligence-in-feedly Tue, 10 Mar 2026 16:48:00 GMT Feedly adds PDF upload and Ask AI integration for closed-source threat intelligence analysis • Enables uploading PDF files directly into Feedly to analyze alongside open-source intelligence feeds via Ask AI • Uses the Threat Graph knowledge base to automatically extract and correlate entities like TTPs, CVEs, and IoCs from uploaded documents Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/simpler-ways-to-query-and-manage-your-intelligence https://feedly.com/changelog/simpler-ways-to-query-and-manage-your-intelligence Thu, 05 Mar 2026 00:16:00 GMT Feedly Threat Intelligence introduces unified query context in Ask AI and full Private Lists management in UI • Adds the ability to attach articles, PDFs, Boards, AI Feeds, and vulnerability agents together in a single 'Ask AI' or 'Research' query via a '+' button. • Adds UI controls to edit Private Lists directly, including adding/removing companies and products, renaming lists, and viewing entity counts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/full-ai-capabilities-now-on-your-own-pdf-reports https://feedly.com/changelog/full-ai-capabilities-now-on-your-own-pdf-reports Wed, 18 Feb 2026 23:24:00 GMT Adds PDF upload and AI processing to Feedly with 'Enable File Upload' workspace setting. • Adds the `Enable File Upload` toggle under Workspace Settings > More, allowing team admins to allow members to upload PDFs for automatic metadata extraction and Ask AI access. • Adds a Files Page to centralize tracking of all team-uploaded documents. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/cyberattack-insights-cards https://feedly.com/new-features/posts/cyberattack-insights-cards Wed, 18 Feb 2026 01:41:00 GMT Feedly introduces Cyberattack Insights Cards with IOCs exportable in STIX 2.1, MISP, or CSV. • Cyberattack Insights Cards provide a dynamic 360° view of cyberattacks, consolidating threat actors, malware, IoCs, and TTPs into a single evolving display. • IoCs within Cyberattack Insights Cards can be exported in STIX 2.1, MISP, or CSV formats for integration with external security tools. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/automate-threat-briefings-and-explore-cyberattacks-faster-in-ask-ai https://feedly.com/changelog/automate-threat-briefings-and-explore-cyberattacks-faster-in-ask-ai Thu, 05 Feb 2026 01:55:00 GMT Feedly adds Threat Landscape integration for Automated Newsletters and Cyberattack Insights Cards in Ask AI responses. • Adds Feedly’s `Threat Landscape` as a source for `Automated Newsletters` to pull trending threat intelligence articles automatically Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/new-features/posts/vulnerability-agent-7-ways-to-use-cvss-vector-filters-for-smarter-cve-prioritization https://feedly.com/new-features/posts/vulnerability-agent-7-ways-to-use-cvss-vector-filters-for-smarter-cve-prioritization Tue, 03 Feb 2026 17:48:00 GMT Feedly's Vulnerability Intel Agent adds CVSS Vector filters for precise CVE prioritization • Adds CVSS Vector filters to the Vulnerability Intel Agent interface for filtering CVEs by attack vector, complexity, privileges required, user interaction, impact scope, and exploitation status. • Supports Boolean logic (AND/OR/NOT) in CVSS Vector filter configuration to combine multiple vulnerability characteristics. • Enables targeting of specific exploitation contexts including 'Exploited', 'Proof of Concept', 'Weaponized', and 'CISA KEV' statuses alongside technical attributes like 'Attack Vector' and 'Confidentiality Impact'. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/connect-indicators-to-threat-actors-malware-and-cyberattacks-automatically https://feedly.com/changelog/connect-indicators-to-threat-actors-malware-and-cyberattacks-automatically Wed, 21 Jan 2026 22:02:00 GMT Feedly Threat Intelligence adds automatic IoC-to-actor attribution, Ask AI IOC cards, and MISP verification. • `Research IoCs with rich context in seconds, not hours` feature automates attribution to threat actors, malware, and cyberattacks via Real-Time Threat Graph. • Added `IOC Insights Cards` to `Ask AI` responses for instant contextual data. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/stop-chasing-attribution-and-easily-link-iocs-to-threats https://feedly.com/changelog/stop-chasing-attribution-and-easily-link-iocs-to-threats Wed, 24 Dec 2025 21:52:00 GMT New IoC table in Insights Cards for direct threat attribution • Adds an `IoCs` table within the `Insights Card` for threat actors, malware families, and cyber attacks • Eliminates the need to jump between tabs or hunt through reports to find related IoCs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/enrich-vertex-synapse-with-feedly-threat-graph-intelligence-and-extract-registry-keys-iocs https://feedly.com/changelog/enrich-vertex-synapse-with-feedly-threat-graph-intelligence-and-extract-registry-keys-iocs Wed, 10 Dec 2025 17:40:00 GMT Enrich Vertex Synapse with Feedly Threat Graph intelligence and extract registry keys IoCs • Integrates Feedly integration with Vertex Synapse to automatically ingest indicators of compromise (IoCs), CVEs, TTPs, threat actors, and malware enriched with context from the Feedly Threat Graph. • Adds a new AI Model for registry keys IoC types that is STIX-ready and includes enhanced metadata extracted from source article context. • Introduces a new Threat Actors from North Africa AI Model. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/enhance-vulnerability-assessment-track-mitre-att&ck-v18-and-personalize-your-intel-profiles https://feedly.com/changelog/enhance-vulnerability-assessment-track-mitre-att&ck-v18-and-personalize-your-intel-profiles Wed, 26 Nov 2025 19:42:00 GMT Feedly Threat Intelligence adds CVE vector filtering, MITRE ATT&CK v18 support, and IoC subtype exposure in article JSON. • Display and filter by specific CVSS v3.1 vector components for granular vulnerability assessment • Track MITRE ATT&CK v18 with 12 new Feedly AI Models for enterprise tactics • IoC subtypes are now displayed in the article JSON Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/enhanced-ai-models-dashboard-improvements-and-bug-fixes https://feedly.com/changelog/enhanced-ai-models-dashboard-improvements-and-bug-fixes Wed, 12 Nov 2025 22:34:00 GMT Feedly Threat Intelligence adds Custom Lists support in TTP Dashboard, new Middle East AI model, and IPv6 IoC detection. • Adds `Threat Intelligence Reports` section to the Cyber Attacks insights card • Adds New AI Model for 'threat actors from Middle East' • Improves `IP IoC` model to include IPv6 IoC detection Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/research-startups-in-real-time-and-leverage-ai-research-updates https://feedly.com/changelog/research-startups-in-real-time-and-leverage-ai-research-updates Thu, 30 Oct 2025 00:03:00 GMT New Banking Cyberattack Dashboard AI Model; RAG source selection and threat graph toggle in Ask AI. • Adds a 'Banking industry' option to the New Cyberattack Dashboard AI Model for monitoring attacks targeting banks • Allows adding articles and selecting sources in Ask AI Research mode to enable RAG, with a toggle to enable/disable the threat graph Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/smarter-cve-analysis-with-ask-ai https://feedly.com/changelog/smarter-cve-analysis-with-ask-ai Wed, 15 Oct 2025 18:32:00 GMT Feedly adds Ask AI integration to Vulnerability Dashboard with personalized prompts and expands CSV export limits • Integrates `Ask AI` directly into the `Vulnerability Dashboard` to allow personalized prompt input for prioritizing and summarizing CVE intelligence with inline citations. • Expands the CSV export limit in the `Vulnerability Dashboard` to return up to 10,000 results. • Adds support for `sha256` as an IoC Hash subtype field in the article JSON output. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/access-the-feedly-app-in-the-slack-marketplace https://feedly.com/changelog/access-the-feedly-app-in-the-slack-marketplace Wed, 01 Oct 2025 16:56:00 GMT Release adds Slack Marketplace integration and improves IoC search normalization, dashboard loading, and AI mapping. • Improved keyword search for specific IoCs using normalization rules for indexing • Improved loading time of the Vulnerability Dashboard when a product version filter is present Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/unlock-multilingual-ai-in-your-feeds https://feedly.com/changelog/unlock-multilingual-ai-in-your-feeds Wed, 17 Sep 2025 18:11:00 GMT Unlock Multilingual AI in your Feeds adds language filtering to new AI Feeds for Threat Intelligence. • Enables discovery of articles in any language within AI Feeds by allowing users to set preferred languages when building the feed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/export-iocs-and-ttps-from-team-boards https://feedly.com/changelog/export-iocs-and-ttps-from-team-boards Wed, 03 Sep 2025 16:30:00 GMT Export IoCs and TTPs from Team Boards in CSV, STIX 2.1, or MISP • Enables export of TTPs to ATT&CK Navigator directly from selected articles or the entire board (max 200 articles) • Improves STIX export format for IP with port as separate network traffic objects • Adds description field to threat TTP STIX objects in exports Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/new-dashboard-columns-for-faster-cyber-attack-analysis https://feedly.com/changelog/new-dashboard-columns-for-faster-cyber-attack-analysis Wed, 20 Aug 2025 15:44:00 GMT Feedly adds 'Status', 'What/So What' columns and 'Recently Reported' filter to Cyber Attacks Dashboard. • Adds 'Status' column to the Cyber Attacks Dashboard to distinguish between newly reported attacks and those with recent timeline updates within a time filter • Adds 'What, So What' column to the Cyber Attacks Dashboard providing structured two-bullet insights on threat type, target scope, affected data, and impact • Adds 'Latest Activity' column to the Cyber Attacks Dashboard to surface the most recent timeline event directly in the table Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/granular-analytics-ai-powered-threat-actor-insights-and-key-improvements https://feedly.com/changelog/granular-analytics-ai-powered-threat-actor-insights-and-key-improvements Thu, 07 Aug 2025 00:01:00 GMT Feedly Threat Intelligence adds granular newsletter analytics with interactive graphs and CSV export, Ask AI in Threat Actor Insight Cards, and new Nuclei/Advisory filters. • Adds an interactive graph to compare key metrics like recipients, open rate, and click rate for newsletters • Adds CSV export capability to download and share analytics reports • Adds time range analysis to track performance over custom periods • Adds a reader and article engagement table to see who is reading what • Adds Ask AI functionality in Threat Actor Insight Cards to run specific queries on threat actors • Makes the Nuclei Vulnerability Scanner filter available in the Vulnerability Dashboard Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/investigate-smarter-collaborate-better-and-onboard-faster-with-these-new-features https://feedly.com/changelog/investigate-smarter-collaborate-better-and-onboard-faster-with-these-new-features Wed, 23 Jul 2025 17:36:00 GMT Adds Cyber Attack Insights Cards to AI Feeds, Ask AI for Malware Insights, team onboarding page, and role-based access control. • Unlocks Cyber Attack Insights Cards in AI Feeds providing attack summary, timeline, and links to threat actors, malware, IoCs, TTPs, and CVEs • Enables Ask AI within Malware Insights Cards to generate summaries, reports, and answer targeted questions about specific malware • Introduces a dynamic 'Getting Started' page for automatic team onboarding in enterprise accounts • Adds role-based access management with Admin, Editor, and Viewer roles to control workspace permissions Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/introducing-two-major-upgrades-cyber-attack-dashboard-&-ai-search https://feedly.com/changelog/introducing-two-major-upgrades-cyber-attack-dashboard-&-ai-search Wed, 09 Jul 2025 19:58:00 GMT Feedly introduces Cyber Attack Dashboard for filtering and tracking attacks, plus AI Search with cited threat intelligence answers. • New 'Cyber Attack Dashboard' provides real-time updates on evolving attacks with filterable views by industry, country, threat actor, malware family, or attack type • New 'Cyber Attack Insights Cards' drill down into individual attacks with timelines, IoCs, TTPs, CVE links, and article references • New 'Search - AI Mode' allows asking natural language questions for structured, cited answers from curated sources and threat graph data Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/break-language-barriers-in-your-research-with-feedly-ais-15-supported-languages https://feedly.com/changelog/break-language-barriers-in-your-research-with-feedly-ais-15-supported-languages Wed, 25 Jun 2025 19:18:00 GMT Feedly AI adds Multilingual support for Arabic, Polish, Ukrainian, and Vietnamese in All Feeds & Web tabs. • Adds Multilingual AI support for Arabic, Polish, Ukrainian, and Vietnamese, enabling global threat intel without language barriers • Enables Feedly AI to deduplicate stories and automatically translate articles to English across the 15 supported languages Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/new-cve-context-smarter-filters-and-multilingual-insights https://feedly.com/changelog/new-cve-context-smarter-filters-and-multilingual-insights Wed, 11 Jun 2025 22:19:00 GMT EUVD ID display in CVE cards, product version filtering in dashboard, and JP/KR/RU language support. • Enables filtering vulnerabilities by specific product versions in the Vulnerability Dashboard • Supports discovering insights written in Japanese, Korean, and Russian via English queries Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/ask-ai-just-got-better-with-prompt-suggestions https://feedly.com/changelog/ask-ai-just-got-better-with-prompt-suggestions Wed, 28 May 2025 16:48:00 GMT Ask AI prompt suggestions and threat actor tags in MISP integration added to Feedly Threat Intelligence • Adds prompt suggestions (expert-curated and LLM-generated) in Ask AI when selecting multiple articles for Feedly Threat Intelligence Advanced 2024 plans. • Adds threat actor tags support in the MISP integration for Feedly Threat Intelligence Advanced plan. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/enrich-your-tip-with-this-new-integration https://feedly.com/changelog/enrich-your-tip-with-this-new-integration Wed, 14 May 2025 19:20:00 GMT Adds ThreatConnect integration and LinkedIn feed support to Feedly Threat Intelligence • Adds ThreatConnect integration to deliver contextual intelligence directly into your TIP. • Enables following LinkedIn feeds in Feedly Threat Intelligence. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/get-contextual-prompt-and-variable-suggestions-in-ask-ai https://feedly.com/changelog/get-contextual-prompt-and-variable-suggestions-in-ask-ai Thu, 01 May 2025 02:07:00 GMT Feedly Ask AI adds contextual prompt and variable suggestions based on article content. • Ask AI now scans the current article to instantly suggest expert (curated by TI/MI analysts) and dynamic (LLM-generated) prompts • Ask AI suggests relevant variables for refinement fields in expert prompts based on article metadata and subject, supporting aliases for threat actors or companies Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence https://feedly.com/changelog/smarter-cve-analysis-multilingual-research-and-linkedin-monitoring https://feedly.com/changelog/smarter-cve-analysis-multilingual-research-and-linkedin-monitoring Wed, 16 Apr 2025 16:41:00 GMT Feedly Threat Intelligence adds Ask AI integration to CVE cards, LinkedIn URL feeds, and Dutch/Portuguese multilingual search. • Adds `Ask AI` direct integration on CVE Insight Cards with specialized expert prompts and automatic article selection for CVs analysis • Enables follow of LinkedIn profiles by pasting profile URLs into the Website search box to create RSS feeds via the RSS Builder • Adds Dutch and Portuguese languages to Multilingual AI capabilities with cross-language deduplication and automatic English translation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/feedly-threat-intelligence