Platform

Featured Integrations

Reduce risk and mitigate cyber attacks, no matter your IT & security stack, maturity journey, or industry

See our Threat Intelligence Solutions in Action

Outcomes

Industries

Threat Intelligence solves pervasive challenges

Reduce operational risk through timely, precise, and actionable intelligence.

See Recorded Future’s Intelligence in Action

Products

Services

Research

Experience our platform live every week. Minimize risks with timely, actionable threat intelligence that helps you stay ahead of threats.

Join our Weekly Platform Preview

Resource Center

Additional Resources

Additional Topics

Resources

Why Recorded Future

About Us

Partner With Us

Join Us

Company

brand-logo-long-black.svg

Rectangular Logo - Digital (RGB).svg

Home

Blog

Contact Us

The Recorded Future Cyber Daily email newsletter provides information on trending indicators and emerging threats detected over the preceding 24 hours. Recorded Future collects data from over 1 million web sources in over 14 languages, adds the new and updated data to the [Recorded Future Intelligence Graph](https://www.recordedfuture.com/platform/intelligence-graph), and applies machine analysis to generate this email newsletter automatically.

Where does the data come from?

Cyber Daily Premium is for clients only, while [Cyber Daily](https://go.recordedfuture.com/cyber-daily) is free for the benefit of the information security community. Cyber Daily Premium includes more data per category, risk scores on vulnerabilities and suspicious IPs, and additional categories not included in the free version — Corporate Targets, Emerging Malware, Cyber Operations, and others.

What are the differences between Cyber Daily and Cyber Daily Premium?

Recorded Future clients receiving HTML emails can click on any entity — company name, threat actor, operation name, malware, vulnerability, or IP address — listed in a title to open its Recorded Future Intelligence Card with options to pivot for further research.

How can I get more info?

Cyber Daily Premium FAQ

The “Hits” count refers to the number of recent events or documents mentioning that specific entity in Recorded Future’s dataset – usually in the most recent 24-hour or 48-hour time windows, depending on the entity type.

The "Hits" Label

Many sections include tags for "Related" entities. These are different types of entities that appear prominently alongside the titled entity in the most recent reporting of it — whether from Recorded Future's curated taxonomies or detected based on language patterns. These values can add additional context or suggest further research, particularly in surfacing new or less discussed correlations.

The "Related" Label

Insikt Group® is Recorded Future’s in-house threat intelligence [research](https://www.recordedfuture.com/research) team, which consists of analysts, linguists, and security researchers with deep government and industry experience. This section includes recent Insikt Group® blog posts, analyst notes with TTP leads and indicators, and other current human-finished intelligence.

“Latest Threat Research from Recorded Future’s Insikt Group” Section

This section highlights recent news articles from our in-house cybersecurity news publication. [The Record by Recorded Future](https://therecord.media) gives you breaking cyber news and exclusive, behind-the-scenes access to leaders, policymakers, researchers, and people in the shadows of the cyber underground.

“The Latest from The Record by Recorded Future” Section

Companies and organizations that have been recently mentioned as targets or victims of cyber attacks are listed in this section.


"Targets" Section

Entities with a "threat actor" attribute — i.e., organizations and people — that generated significant event reporting over the past 24 to 48 hours are highlighted in this section.

"Threat Actors" Section

Typically of a hacktivist nature, "Cyber Operations" brings attention to the more publicly grouped threat actor activity reported across the media sources we monitor.

"Cyber Operations" Section

Recently reported malware employed in recent cyber attacks are listed in this section to give visibility into the specific types of malware threat actors are currently using.

"Malware in Cyber Attacks" Section

This section helps surface new malware and recently adapted malware that [might not yet be actively used in cyber attacks](https://www.recordedfuture.com/threats/emerging-threats). The high rate of mentions may expose new malware before weaponization and deployment.

"Emerging Malware" Section

Recently reported cyber vulnerabilities are listed here. Cyber Daily Premium includes Recorded Future's risk score to help prioritize mitigation.

“Vulnerabilities” Section

Vulnerabilities identified and reported within the past 24 hours with language indicating malcode activity, reverse engineering, proof of concept, exploited in the wild, or weaponized terminology. These _actively_ exploited vulnerabilities usually differ from the top "Vulnerabilities" section.

"Exploited Vulnerabilities" Section

Recently reported Internet Protocol (IP) addresses mentioned with language indicating malicious activity or IPs that co-occurred with a malware entity are highlighted in this section.

“Suspicious IP Addresses” Section

Clarifications of terms and sections:

<p>For more information about Recorded Future's risk scoring, clients can view the current trigger rule sets, for each entity type, in detail in our Support Center.</p>

Refine your search

We could not find any results for your search, so why not start with the articles listed below?