48% of Security Pros Prohibited From Intelligence-Sharing
Some do so anyway, according to new Kaspersky research.
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltc94608acf452fd67/655cf371ab171e040a838b2a/329050_DR23_Graphics_Website_V5_Default_Image_v1.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Threat intelligence (TI) analysts are often involved in professional information-sharing communities, such as ISACS. But that does not necessarily mean they are offering up helpful threat intelligence for the common good: According to new research from Kaspersky, while over two-thirds (69%) of TI analysts said they are involved in professional communities, 48% of all those working in IT and cybersecurity roles are not allowed to share threat intelligence artifacts discovered through those communities.
Kaspersky surveyed more than 5,200 IT and cybersecurity practitioners globally for the report "to see if other businesses were ready to collaborate and share TI."
The research found that respondents with TI analysis responsibilities are more likely to participate in specialized forums and blogs (41%), Dark Web forums (33%), or social media groups (21%). But when it comes to sharing their own findings, only 50% of respondents have actually made their discoveries public.
In companies where external sharing is allowed, 79% of security analysts did so. In 7% of cases, security analysts even shared TI findings despite it being prohibited by their organizations.
Kaspersky says sharing restrictions are partly driven by concerns that if some objects are known publicly before a company can respond to an attack, then cybercriminals may realize they have been detected and change their tactics.
Read the full report here.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024