Cyware Situational Awareness Platform

The Feeds module has been introduced to CSAP Member Portal. This feature brings additional security feed sources directly to Members, eliminating the need for managing different URLs and feed sources outside of CSAP. Here, you can subscribe to RSS feeds that have been enabled by a CSAP administrator. Once you follow a feed, you can see, at a glance, if a feed is new, unread, or read, as well as bookmark or archive feeds, and filter for different views, based on your parameters. You can also initiate alert-based discussions, as well as create and assign recommended actions to other users from the alerts you receive in the feed. This provides you with the ability to directly leverage the information within feeds, rather than just consuming alerts.

Cyware has introduced a web browser extension that enables both the collection of IoCs and the crafting of intel from parsed information. When you are signed in to CSAP or CTIX, the browser extension validates the active sessions for one or both platforms, and enables you to scan specific web pages to identify IoCs. From this, you can search for, select, and add IoCs to categories. You can then choose if you want to publish the IoCs to CSAP, CTIX, or both, simultaneously.

For CSAP, once the IoCs are published, you can create and share threat intel based on the information parsed by the browser extension. Once you create the intel, it is saved in Draft mode and can then be reviewed by an Analyst or Intel Approver. This enables you to automate the gathering of threat information and directly leverage it from the web, without having to manually copy and paste data, thereby saving time and improving both responsiveness and information sharing.

In order to optimize readability and comfort for users, a Dark Mode theme for CSAP Member Portal is now available. This feature is designed for low-light scenarios and instances where it is necessary to minimize disturbing others. Additionally, dark mode reduces blue-light emissions from your screen, thereby reducing the possibility of eye strain or discomfort due to light sensitivity. You can toggle this theme on or off from the toolbar on the top-right corner of the interface.

You now have the ability to unsubscribe from email notifications, thereby reducing noise in your mailbox and tailoring notifications to only specific emails that you want to receive. In your Profile Settings page, you can opt to stop receiving all emails, or select specific items about which you no longer want to be notified, such as alerts, surveys, threat intel, and so on. Additionally, a user with a Member Admin role can globally deactivate these emails on behalf of other CSAP users. This enables you to tailor your information flow so that you only receive notifications in the platform, or choose notifications that are pertinent to you. Note that you are unable to unsubscribe from certain emails, such as invites to CSAP, OTP, or Forgot Password.

You can now export information associated with shared threat intel, in CSV format, from the Export tab of the Settings module. The output file displays details for each intel (for example, Title, Intel Category, TLP, Summary, and similar), and you can retrieve threat intel for set time periods, such as Last 7 Days, Last 30 Days, Last Quarter, or Last Year. This allows you to better understand, at a glance, the threat intel that is being submitted to your organization.

The DailyDigest email template has been upgraded. Daily alerts are now bifurcated, by Category, to improve visibility and call attention to relevant alerts. This also prevents critical information from being missed when consuming these emails. Additionally, the following enhancements have been added: