https://cybertoolchain.io/tools/flashpoint New releases and features in Flashpoint, tracked by The Cyber Toolchain. en Sat, 31 Oct 2026 07:46:01 GMT https://flashpoint.io/resources/product-updates/ https://flashpoint.io/resources/product-updates/ Sat, 31 Oct 2026 07:46:01 GMT Flashpoint adds Ransomware Files visibility in Ignite to expose leaked file paths and trees for faster triage⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/oct-22-2026-ransomware-files-in-ignite/ https://flashpoint.io/resources/product-updates/oct-22-2026-ransomware-files-in-ignite/ Thu, 22 Oct 2026 23:12:59 GMT Flashpoint Ignite gains Ransomware Files: searchable leaked file trees with path alerting, Slack notifications, and MCP server access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Ransomware Files` as a searchable data type in Ignite, enabling search across leaked file trees by file name, path, or keyword.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds filters — `Ransomware Group`, `Victim Name`, and `File Type` — to refine Ransomware Files search results. • Adds proactive alerting on critical file paths with real-time notifications delivered in-platform, via email, or to Slack channels. • Exposes Ransomware Files intelligence programmatically via Flashpoint's Model Context Protocol (MCP) server for ingestion into SIEMs, SOARs, and internal tools. • Links every Ransomware Files search result directly to its originating ransomware victim post for full threat-actor context. • Adds a file sample view on ransomware victim posts with one-click search to surface all related files from a given leak. • Enables direct RFI (Request for Intelligence) submission from a confirmed Ransomware Files match inside Ignite. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/ https://flashpoint.io/resources/product-updates/ Mon, 05 Oct 2026 16:43:03 GMT Flashpoint adds MCP Server, Natural Language Search in Echosec, EASM module, ATM Receipts Dashboard, and Anonymous Browser in Managed Attribution.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Natural Language Search and AI Results Refinement to the Echosec `Locate` view for geospatial OSINT discovery.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Launches Flashpoint External Attack Surface Management (EASM) as an add-on module in Ignite, providing a continuous attacker's-eye view of the perimeter. • Introduces the ATM Receipts Dashboard in Flashpoint Fraud Intelligence for analyzing compromised ATM receipt images, exposing card and account data, deposits, and fraud trends. • Adds a full product redesign of Flashpoint Managed Attribution with a built-in Anonymous Browser capability. • Enables on-demand Exit Location changes for Managed Attribution virtual machines without interrupting workflow. • Adds AI Summarization for Alerting in Flashpoint Ignite, delivering structured, reference-backed summaries for Community alerts via in-platform view or daily email briefings. • Introduces Filter Sharing in Echosec to synchronize teams and reduce noise in large datasets. • Adds `Optimize`, an AI-powered feature that automatically suggests and inserts location-based keywords (business names, street names, landmarks) into real-time location-based searches. • Adds a streamlined workflow to transition directly from discovering a threat in Flashpoint Ignite to safely analyzing it within Managed Attribution. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/ https://flashpoint.io/resources/product-updates/ Tue, 11 Aug 2026 15:43:24 GMT Echosec gains Natural Language Search and AI-powered discovery for geospatial OSINT. • Adds Natural Language Search to Echosec, Flashpoint's geospatial open-source intelligence tool, enabling query-by-plain-language across geospatial data sources. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/introducing-the-flashpoint-mcp-server/ https://flashpoint.io/resources/product-updates/introducing-the-flashpoint-mcp-server/ Thu, 25 Jun 2026 14:26:07 GMT Flashpoint MCP Server is now GA, exposing threat intelligence to AI assistants via the Model Context Protocol. • New Flashpoint MCP Server enables AI assistants (e.g., Claude, Gemini) to query Flashpoint intelligence directly via the Model Context Protocol (MCP) standard. • Supports natural-language retrieval across Communities Intelligence, Finished Intelligence Reports, News, Technical Indicators, Vulnerability Intelligence, Ransomware Activity, Compromised Credentials (Enterprise & Customers), Infected Hosts, and Strategic Entity Data (SED). • Authenticates via OAuth or API token, automatically inheriting the organization's existing Flashpoint subscription entitlements. • Read-only access model: AI systems can search, retrieve, enrich, and analyze intelligence without the ability to alter settings, create alerts, or modify operational workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/introducing-the-flashpoint-mcp-server/ https://flashpoint.io/resources/product-updates/introducing-the-flashpoint-mcp-server/ Thu, 25 Jun 2026 14:26:07 GMT Flashpoint introduces a new MCP Server for integrating intelligence into AI workflows. • Adds the Flashpoint MCP Server capability to integrate intelligence data directly into AI assistants and AI-native workflows via the Model Context Protocol (MCP). • Exposes Flashpoint intelligence modules including Communities Intelligence, Finished Intelligence Reports, News, Technical Indicators, Vulnerability Intelligence, Ransomware Activity, Compromised Credentials, Infected Hosts, and Strategic Entity Data as queryable tools. • Supports OAuth authentication or API tokens for connecting AI assistants to the Flashpoint MCP Server. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/introducing-the-flashpoint-mcp-server/ https://flashpoint.io/resources/product-updates/introducing-the-flashpoint-mcp-server/ Thu, 25 Jun 2026 14:26:07 GMT Flashpoint launches its MCP Server for reading intel via AI assistants. • Adds the Flashpoint MCP Server, exposing intelligence as data tools for AI-native workflows • Enables search, retrieve, enrich, and analyze capabilities for Communities Intelligence, Finished Intelligence Reports, News, Technical Indicators, Vulnerability Intelligence, Ransomware Activity, Compromised Credentials, Infected Hosts, and Strategic Entity Data • Supports OAuth authentication or API token connections for MCP-compatible clients like Claude and Gemini Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/introducing-intelligence-requirements-in-flashpoint-ignite/ https://flashpoint.io/resources/product-updates/introducing-intelligence-requirements-in-flashpoint-ignite/ Thu, 28 May 2026 15:35:13 GMT Flashpoint Ignite adds native Intelligence Requirements (GIRs/PIRs) for linking alerts to investigations and measuring CTI ROI. • Introduces a dedicated Intelligence Requirements experience for creating and managing General Intelligence Requirements (GIRs) and Priority Intelligence Requirements (PIRs) directly in Flashpoint Ignite • Enables pre-built PIR templates and custom requirement creation to accelerate onboarding Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/introducing-intelligence-requirements-in-flashpoint-ignite/ https://flashpoint.io/resources/product-updates/introducing-intelligence-requirements-in-flashpoint-ignite/ Thu, 28 May 2026 15:35:13 GMT Flashpoint Ignite adds Intelligence Requirements (GIRs/PIRs) with alert alignment and investigation linking. • Introduces a dedicated experience for creating and managing General Intelligence Requirements (GIRs) and Priority Intelligence Requirements (PIRs) directly in the platform, supported by pre-built templates or custom definitions • Adds capability to align monitoring alert rules—both existing user-created rules and AI-recommended ones—to specific PIRs within the platform • Enables escalation of intelligence findings into Investigations workflows with optional direct connection to specific PIRs for operational tracing • Provides visibility metrics on monitoring activity, investigative escalations, and operational workflows tied to specific intelligence priorities Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/managed-attribution-redesign/ https://flashpoint.io/resources/product-updates/managed-attribution-redesign/ Fri, 08 May 2026 17:30:54 GMT Flashpoint adds a built-in anonymous browser with rotating exit IPs for instant triage in Managed Attribution. • Introduces an Anonymous Browser capability alongside the persistent Managed VM for instant, isolated triage sessions • Adds zero-persistence session behavior that automatically wipes all cookies and history upon closing a browser instance • Adds support for rotating exit IPs to mask analyst identity during active research within the anonymous browser Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/#blog-card-title-58236 https://flashpoint.io/resources/product-updates/#blog-card-title-58236 Fri, 08 May 2026 00:00:00 GMT Flashpoint introduces Managed Attribution Redesign and built-in Anonymous Browser capability. • Unveils a full product redesign for Flashpoint Managed Attribution Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/introducing-flashpoint-external-attack-surface-management-easm/ https://flashpoint.io/resources/product-updates/introducing-flashpoint-external-attack-surface-management-easm/ Tue, 05 May 2026 21:54:03 GMT Flashpoint launches EASM as an Ignite add-on for continuous discovery and mapping of internet-facing assets to proprietary vulnerability intelligence. • New `EASM` module available as an add-on in the Flashpoint Ignite service, providing continuous external attack surface management. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/optimize-in-locate/ https://flashpoint.io/resources/product-updates/optimize-in-locate/ Thu, 23 Apr 2026 23:16:08 GMT Echosec Optimize now available in Locate view for automated location-based keyword suggestions via UI. • Adds AI-powered "Optimize" feature to the Locate view's location search bar that automatically suggests and inserts relevant location-based keywords (business names, street names, landmarks) into real-time searches • Enables specification of suggestion types (e.g., schools, landmarks) via a new location pin icon dropdown in the Optimize workflow • Adds "Optimize now" button to generate and select location suggestions within the current geographic area before searching Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/#blog-card-title-57896 https://flashpoint.io/resources/product-updates/#blog-card-title-57896 Thu, 23 Apr 2026 00:00:00 GMT Flashpoint AI automatically suggests and inserts location keywords in the Locate View. • Adds AI-driven optimization that suggests and inserts relevant location-based keywords (business names, street names, landmarks) into real-time searches within the Locate View. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/download-safely-ma/ https://flashpoint.io/resources/product-updates/download-safely-ma/ Wed, 21 Jan 2026 22:48:44 GMT Flashpoint adds a 'Download Safely' UI button to pivot Ignite file attachments directly into an isolated Managed Attribution session. • Adds a 'Download Safely' icon next to file attachments in Flashpoint Ignite search threads for direct pivoting to Managed Attribution • Automatically copies a secure GCP-hosted link to the clipboard and opens the Managed Attribution browser session upon clicking Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/ai-summaries-alerting/ https://flashpoint.io/resources/product-updates/ai-summaries-alerting/ Thu, 15 Jan 2026 14:28:52 GMT Flashpoint Ignite adds AI-summarized alert briefings, daily email digest, and domain-intent refinement for alert rules. • Adds `Summarize` button in the My Alert Results tab to generate structured, reference-backed intelligence briefs from a selected alert rule • Adds configurable Summary Intent options (CTI, Fraud, Physical Security, Executive Risk) and custom guidance fields to refine AI summaries before generation • Adds Daily AI Summary Emails feature, enabling automatic bundling of the previous 24 hours of alert activity into structured emails sent to designated recipients Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/#blog-card-title-55293 https://flashpoint.io/resources/product-updates/#blog-card-title-55293 Thu, 15 Jan 2026 00:00:00 GMT Flashpoint Ignite adds AI summarization for Community alerts with daily email option • Adds in-platform AI-generated summaries for Community alerts that are structured and reference-backed to reduce alert fatigue Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/echosec-filter-sharing/ https://flashpoint.io/resources/product-updates/echosec-filter-sharing/ Thu, 18 Dec 2025 18:28:04 GMT Flashpoint Echosec adds ability to share saved search filters with the entire organization. • Enables sharing of saved search filters within the Echosec interface to standardize monitoring across teams. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/#blog-card-title-54544 https://flashpoint.io/resources/product-updates/#blog-card-title-54544 Thu, 18 Dec 2025 00:00:00 GMT Introducing Filter Sharing in Echosec to help teams synchronize and reduce noise in open-source intelligence datasets. • Adds `Filter Sharing` capability in Echosec to enable team synchronization of filters. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/echosec-optimize/ https://flashpoint.io/resources/product-updates/echosec-optimize/ Tue, 16 Dec 2025 18:42:49 GMT Introduces the 'Optimize Locations' button in Monitor and Locate views to generate AI-driven location keywords. • Adds an 'Optimize Locations' button next to the search bar in the Monitor view for AI-generated location-based keyword suggestions • Adds an 'Optimize Locations' button next to the search bar in the Locate view for AI-generated location-based keyword suggestions • Enables selection of specific location types (e.g. tourist attractions, schools) via a pen icon within the Optimize configuration step Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/#blog-card-title-54493 https://flashpoint.io/resources/product-updates/#blog-card-title-54493 Tue, 16 Dec 2025 00:00:00 GMT Introduces Echosec Optimize, an AI-powered feature for generating location-based keywords to improve search results. • Adds `Echosec Optimize`, an AI-driven capability that generates hyper-relevant, location-based keywords to address the scarcity of geotagged social media data. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/#blog-card-title-53570 https://flashpoint.io/resources/product-updates/#blog-card-title-53570 Thu, 04 Dec 2025 00:00:00 GMT Flashpoint adds self-serve VM exit location reset in Managed Attribution • Adds the ability to change the Exit Location for a virtual machine on demand via the Flashpoint Managed Attribution service. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint https://flashpoint.io/resources/product-updates/#blog-card-title-53609 https://flashpoint.io/resources/product-updates/#blog-card-title-53609 Thu, 06 Nov 2025 00:00:00 GMT Flashpoint adds the ATM Receipts Dashboard to Fraud Intelligence for analyzing compromised ATM receipt images and fraud trends. • Adds the ATM Receipts Dashboard in Flashpoint Fraud Intelligence to analyze compromised ATM receipt images from illicit sources Full history on Cyber Toolchain: https://cybertoolchain.io/tools/flashpoint