Kaspersky enhances threat lookup with AI-driven insights

Kaspersky's Threat Lookup service now provides Artificial Intelligence-driven summaries and article abstracts, aiding cybersecurity professionals in gathering relevant information more efficiently.

The inclusion of AI-generated insights allows users to obtain information on threat actors, affected regions, industries, and associated software directly within the OSINT tab of the platform. This development aims to alleviate the task of manually sifting through numerous articles, thus saving cybersecurity teams valuable time while accessing a growing variety of indicators.

Addressing the increasing demands on security operations, Kaspersky has enhanced its Threat Lookup service in response to the Enterprise Strategy Group's report indicating that 22% of organisations prefer security personnel to concentrate on strategic initiatives over routine tasks. By automating OSINT searches, the service aims to streamline research and investigation processes.

The service aggregates comprehensive data on cyberthreats, offering information through a user-friendly interface of the Kaspersky Threat Intelligence Portal. It provides intelligence on various threats including URLs, domains, IP addresses, file hashes, and more, with the objective of bolstering incident response and pre-emptively warding off potential cyberattacks.

Previously, OSINT Threat Lookup was restricted to hash lookups and source links alone. The updated service now encompasses a broader spectrum of indicators, facilitated by an AI system developed at the Kaspersky AI Research Center. Supported indicators now include IP addresses, domains, URLs, and strings adhering to common host naming protocols, alongside several file hash types such as MD5, SHA1, and SHA256.

This update, driven by Kaspersky's advanced infrastructure, is designed to enhance threat assessment delivery by providing streamlined, actionable intelligence, thus promising faster and more effective evaluations.

"We aim to provide companies with extensive data to protect them from cyberattacks and mitigate potential negative consequences. Since the effectiveness of this effort is frequently contingent on the amount of time cybersecurity teams dedicate to research, it is important to automate routine tasks to enable them to focus on more intricate issues. Our AI-powered OSINT search capabilities will assist them with this endeavour and save time when seeking contextual information for their investigations," comments Anatoly Simonenko, Senior Product Manager at Kaspersky.