Table Of Contents
What’s new
Flashpoint has expanded its Social Risk Score by incorporating Telegram as a new data source in addition to existing X (formerly known as Twitter) data. Social Risk Score is an estimation of the amount of attention and mentions a given vulnerability is getting on social media. When a vulnerability is mentioned or discussed widely, there is an increased likelihood of it being used in exploitation. As we pick up on new chatter, the Social Risk Score increases according to the volume of posts, their authors and more. When the relevance of the vulnerability wanes, the Social Risk Score decreases.
This enhancement enables the analysis of social media activity from both Telegram and X to identify and assess potential vulnerabilities more effectively. Additionally, the Social Risk Score can now be viewed in Ignite as a graph over time, allowing users to assess social activity and threat actor mentions and identify changes or spikes that may indicate increased risk.
This integration broadens the scope of social media monitoring, providing a more comprehensive understanding of threat actor activity and potential vulnerabilities. Customers gain deeper insights into the severity of vulnerabilities, allowing for more informed and proactive security decisions across remediation and patching cycles.
You can see the Social Risk Score within Ignite below:
Why it matters
Broadening Social Activity for Vulnerability Awareness
Telegram has emerged as a significant platform with a high volume of discussions and mentions, particularly regarding technical topics and potential vulnerabilities. By including Telegram in our social risk calculation, we can:
- Gain a more comprehensive understanding of the social risk landscape:
- By incorporating Telegram’s data, Flashpoint provides a broader view of the social risk environment, helping identify emerging threats and trends across platforms and enabling a more comprehensive risk assessment.
- Potentially uncover vulnerabilities that might have been previously missed:
- Telegram’s unique user base and content focus can reveal vulnerabilities that might otherwise be missed, allowing for quicker response and mitigation.
- Provide a more granular Social Risk Score:
- Integrating Telegram data adds another layer of detail to the Social Risk Score calculation, resulting in a more precise and nuanced risk assessment that reflects the specific threats and discussions on Telegram and enables more targeted and effective security efforts.
Integrating Telegram data into Flashpoint’s Social Risk Score enhances a threat-informed view of the vulnerability, improving threat assessment and delivers a nuanced understanding of the social risk landscape.
How it works
The new feature is integrated into the existing Vulnerabilities record, allowing for easy access and analysis:
- Navigate the Dashboard: Go to ‘Vulnerabilities’ > ‘Search’ in the Ignite platform.
- Navigate to any vulnerability of focus and you will see the Social Risk Score along the right-hand side of the vulnerability record page
- Below that, you will see the Social Risk Score graph allowing you to reference the activity over time.
Frequently Asked Questions (FAQ): Social Risk Score – Adding Telegram Data
Q: Does this require any customer action?
A: No immediate action is required. This update is implemented automatically, and customers will immediately benefit from the enhanced analysis.
Q: Will the scores change?
A: It may. The overall social risk score might be impacted. While the underlying scoring methodology remains the same, the inclusion of Telegram data may result in some scores being higher. This is because we are now considering a broader range of potential vulnerabilities.
Q: Does this make the Social Risk Score more accurate?
A: Yes, this provides a more comprehensive risk assessment: The integration of Telegram allows us to provide a more complete picture of the potential social risks associated with vulnerabilities in the wild.