2024 Releases

december 2024 🚀 supply chain monitoring page recent improvements release date dec 16, 2024 we're excited to share the latest updates to the supply chain monitoring page ⚡ performance boost the page now loads significantly faster , including all graphs and table results dashboards and table results load simultaneously—no more waiting! smoother scrolling with bigger batches of table results loading at once 🎨 new layout we’ve given the page a fresh look to improve usability and navigation 🔍 bug fixes & enhancements 🎉 the table now displays identifiers found in ransom leak listings directly fixed some incorrect breached date values resolved an issue where false positives flagged the victim as their own supply chain leak addressed missing victim metadata (e g , country, industry) in cases where it should have been displayed 🆕 new data source stealer logs from direct sources release date dec 5, 2024 we’re excited to announce the addition of a new stealer log source to the platform! this is a further enhancement to our telegram stealer log threat intelligence capabilities source name stealer logs from direct sources seamless integration the new source integrates directly into the existing processing pipeline, maintaining consistent functionality and ui across the platform enhanced search compatibility existing queries (e g , metadata source\ stealer logs ) will automatically include this source, bringing the total to four stealer log sources this update ensures you continue to stay ahead of evolving threats with a broader and more diverse data feed 🔍 saved queries in threat flow release date dec 2, 2024 saved queries in threat flow allow you to save a combination of a query and a set of filters when browsing the conversation explorer this feature provides an easy way to revisit, manage, and monitor specific conversations based on your topics of interest saved queries are unique to each tenant what's new save and name your searches for future use automatically apply previously configured queries, filters, and date ranges to conversations in conversation explorer manage your queries with options to rename, update, or delete them use saved queries to more easily create custom intel using the custom intel builder why it matters investigative efficiency quickly return to your most relevant searches without reconfiguring filters or remembering queries stay focused keep track of specific areas of interest, ensuring consistent monitoring of what you deem important november 2024 📊 dashboard and reporting revamp new metrics for enhanced transparency & impact release date nov 27, 2024 we're excited to announce the launch of a fully revamped dashboard and reports this update will retire outdated charts and introduce new, insightful metrics designed to provide clearer, more actionable intelligence what’s coming operational metrics highlighting the events most important for user to action, and allowing users to track month over month performance event severity & growth insights users can now view the number of events by severity , track trends over time, and see metrics on events that have been remediated or ignored this helps prioritize the most severe incidents and observe risk evolution mean time to resolution a detailed metric showing average resolution times by severity enables teams to assess response efficiency and focus on high severity events direct navigation to events clickable cards within “events to resolve” seamlessly route users to relevant events in the feed, streamlining response workflows export & reporting all charts can be exported for reporting, with editable options available within 30 days why it matters increased transparency and credibility with more detailed and relevant metrics, you can better communicate their security posture to stakeholders, showcasing the value flare provides in managing exposure risk simplified user experience outdated charts will be removed, reducing confusion and enhancing focus on valuable insights this dashboard overhaul strengthens flare’s platform by delivering impactful metrics that empower users to act confidently on the most pressing issues 👀 visibility on global search api consumption release date nov 25, 2024 users with access to the global search api to monitor their usage directly, helping them manage api consumption effectively and stay informed about their activity what’s new consumption insights gain real time visibility into your global search api usage, including the number of requests made and remaining quotas quota tracking in api responses the search api response now includes the x flare global searches remaining header, displaying the number of api calls left in your monthly allocation proactive monitoring recommendations to avoid service interruptions or missed events, we recommend implementing monitoring on the x flare global searches remaining header to ensure you stay within your allocated quota ⚠️this feature is available exclusively to users with access to the global search api if you do not currently have access, please contact your customer success manager 🔌 splunk app release date nov 22, 2024 the flare splunk app is available now on splunkbase —designed to empower you with the insights and flexibility needed to secure your environment more effectively what’s new full event ingestion ingest complete flare event content directly into your on premise splunk instance easy configuration a simple setup page within the splunk app allows you to configure your flare api key and tenant id, enabling a hassle free connection comprehensive documentation a step by step guide is included to help you configure and manage the integration, ensuring you’re up and running quickly with minimal support why it matters enhanced workflow integration the flare splunk app ensures you can monitor and act on flare alerts directly from splunk, streamlining workflows for your teams and reducing the need to switch between platforms actionable intelligence by providing full event data, the app enables advanced correlation and automation workflows, helping you respond faster and more effectively to threats on premise flexibility built specifically for on premise splunk environments, this app aligns with enterprise requirements, providing the control and security customers demand 🚀 performance boost 10x faster search release date nov 18, 2024 we’ve revamped our events database, delivering a significant boost in query performance what’s new optimized search logic global search now prioritizes recent data, gradually expanding the search scope over time this means queries with recent results are dramatically faster lightning fast results our tests show 95% of searches now complete in under 1s, a 10x improvement! increased reliability this faster, optimized search logic also greatly inreases the reliability of the platform for all users, as complex searches are now better isolated how it works our database is now time segmented rather than relying on a single massive dataset this enables us to query smaller, relevant subsets of data while maintaining top notch performance—even as our data continues to grow why it matters this enhancement ensures faster, more efficient data access, helping you quickly obtain the insights needed for real time decision making ✨ export intel & threat flow polish release date nov 14, 2024 we’ve made several updates to improve navigation, readability, and the sharing experience in threat flow improved navigation navigating threat flow is simpler with a redesigned tab bar, now featuring intel and conversation explorer tabs this change better highlights each section’s purpose, making it easier to locate the information you need cleaner intel we’ve moved conversation topics out of the intel cards and into the details pane now, topics are clickable—just click any conversation topic from any intel to perform a search in conversation explorer, helping you dive deeper into areas of interest enhanced details pane the details pane has been updated! simplified tab titles make navigation clearer larger font and better spacing for readability an easily accessible export button lets you download intel as a pdf or docx 🔄 performance and consistency updates release date nov 11, 2024 we’ve implemented significant updates to improve coherence and performance event stats consistency stats in the events page’s detail panel now accurately reflect the actual number of visible cards, ensuring consistency and reducing discrepancies when viewing filtered results performance boost event stats and results load faster, particularly when filtering by category or metadata, enhancing overall responsiveness enhanced identifier management when creating or deleting multiple identifiers, users should now experience stable and predictable wait time for event updates these updates streamline the user experience, offering improved accuracy and faster access to event data, especially during high demand tasks 🆕 new emerging source potential stealer logs in alexandria release date nov 8, 2024 we’re excited to announce the launch of potential stealer logs to our emerging sources this source captures "rejected" stealer logs from the traditional pipeline—files that resemble stealer logs but lack critical information or have unsupported layouts this addition ensures that even non standard or incomplete stealer logs are accounted for, enabling more comprehensive threat analysis 🛠️ intel builder release date nov 5, 2024 in threat flow, we’ve added a new way to collect and organize conversations across your searches, making it easier than ever to build intel intel builder you can now add or remove conversations of interest by clicking the + or buttons next to any conversation following a search in threat flow selected conversations are saved to the intel builder , which you can review them anytime by clicking build intel from there, you can either clear the conversations or create a intel, based on your selections the conversations saved to intel builder are stored locally, not based on your current tenant conversations will be wiped if you clear your cache, or switch browsers october 2024 🆕 new emerging sources release date oct 25, 2024 we’re thrilled to announce the introduction of three new emerging sources , bringing new levels of visibility to critical data 1\ pii & unverified leaks what it covers pii breaches (e g , leaked personal information) "unverified" breaches from online sources where the origin is uncertain a breach is considered "verified" when acknowledged by trusted services like haveibeenpwned (hibp) or "official" dark web forum lists example the pii portion of the pureincubation breach 2\ ransomware files what it covers files related to ransomware attacks, such as sensitive documents or operational data these files (and their extracted features) won’t be linked to ransomware events in the platform these will be independent events 3\ other found files what it covers miscellaneous files identified by flare teams that hold investigative value but don’t align with the categories above holistic data coverage provides a deeper dive into emerging threats, with valuable insights from unverified and unconventional sources stay tuned as we roll out these features to keep your security operations one step ahead! 🆕 stealer log text file viewer release date oct 24, 2024 we’re introducing a convenient new feature that lets you view txt files from stealer logs directly in the browser just click the button to open a modal with the file's contents displayed, making it easier to quickly access and review text data 📰 new data source sec 8 k filings for cybersecurity incidents release date oct 16, 2024 we’ve added sec 8 k filings as an emerging source , and is therefore in a 'raw' fomat the vision for this would be for monitoring for material cybersecurity incidents, giving you real time alerts when publicly traded companies report significant breaches proactive third party risk get timely alerts on breaches involving vendors, partners, or suppliers vendor risk management quickly assess and respond to supply chain breaches with contract reviews and security updates impact & compliance support use incident details for impact assessments and stay informed on risks that may affect compliance this feature strengthens visibility into third party cybersecurity risks for proactive and informed decision making 🐞 bug fix event stats consistency release date oct 10, 2024 we’ve resolved an issue on the events page to ensure that category stats, severity scores, and event counts now display coherently across the board enjoy more accurate insights at a glance! 🔍 search by url in credentials browser release date oct 2, 2024, at 10 00 am est we’re excited to launch search by url in the credentials browser, allowing you to quickly locate leaked credentials associated with specific websites what’s new easily search leaked credentials by urls for faster, more targeted investigations why it matters this feature streamlines incident response, improving investigation speed and reducing manual effort for better account protection september 2024 🔑 credential browser enhancements release date sep 27, 2024 we've overhauled the credentials browser to offer more powerful filtering, sorting, and search capabilities credentials are now split into two tabs tenant feed quickly view leaked credentials that match your configured identifiers global search use a search bar to scan flare’s leaked credentials database, with filters for matching dates, sources, and ignored/remediated credentials you can filter credentials based on your organization’s password policy (e g , lack of symbols or length requirements), with both include and exclude options filtered results can be exported for easier reporting and remediation view urls associated with stealer logs/ulps in a new sliding details drawer, with additional search functionality by specific urls 🔒 global search tab update in credentials browser release date sep 24, 2024, at 10 00 am est we’ve updated the global search tab in the credentials browser to improve permissions consistency what’s new users without global search permission will see disabled interactive elements (dropdowns, checkbox, search bar) and a contextual message why it matters aligns global search functionality in credentials browser with the events page, ensuring a consistent experience across the platform ⚡️ threatflow explorer meets custom intelligence release date sep 20, 2024 we’re excited to announce major enhancements to threatflow , allowing for deeper exploration and customization of threat intelligence you can now select individual unit summaries when browsing through explorers and create custom intelligence reports from them when using the detail view in custom intelligence, related unit summaries , related events , and related intelligence are displayed, giving you a fuller context on your findings custom intelligence can now be named, making it easier to organize and categorize your intelligence reports we've improved error handling you won’t be able to create an empty custom intelligence without a name or keywords, and we’ve ensured keyword entries are applied even if you forget to hit enter a sleek new loading animation enhances your experience while custom intelligence reports are being created additionally, the settings copy has been adjusted for better clarity around queries and how selections from theme and industry are processed 🔗 api improvements release date sep 20, 2024 developers, rejoice! we’ve made significant improvements to the flare api, making it easier than ever to integrate with our platform the api documentation has been revamped for better clarity and structure we’ve added new use case guides to help you quickly address specific customer needs released python & go sdks for faster, more flexible integrations simplified endpoints offer a more intuitive user experience, reducing friction for users and developers alike 🚀 improved scalability release date sep 13, 2024 our infrastructure got a serious boost! the scoring engine is now more resilient and scalable, ensuring smooth operations even under heavy workloads the platform will no longer crash when large scale actions (like deleting big batches of identifiers) are performed the scoring engine now scales horizontally, allowing for replication across multiple service instances and dramatically increasing our data ingestion capacity this opens the door to exponential growth without service interruptions here's an updated, more concise release note 📰 new data source financial data release date sept 10, 2024 we've added a new data source focused on financial data, including sites where stolen credit card information is sold this source provides key insights into illicit activity around compromised financial information improved fraud detection gain visibility into compromised financial data to help detect fraudulent activity early proactive threat response use these insights to strengthen defenses against financial security threats this addition bolsters your intelligence capabilities, particularly for teams managing financial security and fraud prevention august 2024 ⚡️ threat flow explorer release date aug 6, 2024 introducing threat flow explorer , flare’s first of its kind transparent generative ai application for dark web research whether you're responding to a major cybersecurity incident or performing routine threat intelligence, threat flow makes your job faster and more efficient by delivering real time summaries of dark web chatter here’s what sets it apart transparency unlike traditional ai models, threat flow gives you a clear look at the raw data (called unit summaries ) used to generate reports, making it easier to trust and verify findings third party validated developed with the econcrime lab at the university of montreal, threat flow’s accuracy was found to be 98% compared to primary dark web research sources fire drill ready when senior leadership needs fast, accurate reports during major incidents (e g , log4j or mgm/scattered spider), threat flow helps cut through the noise and delivers essential insights quickly real time intelligence get up to the minute information on exploits and indicators of compromise (iocs) , giving you time to deploy defenses before these threats are weaponized cybercrime ecosystem research explore the dark web at scale and gain insights into the relationships, tools, and methods used by cybercriminals, providing valuable intelligence for security teams and law enforcement with threat flow, you can research, report, and respond faster than ever 🔑 url login passwords (ulps) release date aug 2, 2024 we’ve enhanced our data collection capabilities with the introduction of url login passwords (ulps) we are now collecting and storing ulps wherever possible, providing deeper insights into compromised credentials 🔔 optional subdomain enumeration now available release date july 16, 2024 we’re excited to introduce optional subdomain enumeration for more streamlined identifier management what’s new default setting subdomain discovery remains enabled by default optional control customers can request access to a new subdomain control panel via customer success, allowing subdomains to appear on a recommended page rather than auto adding to identifiers why this matters this feature helps customers with multiple domains manage identifier limits more effectively by making subdomain enumeration optional free trials subdomain discovery will be disabled by default for trial accounts and show on the recommended page for review july 2024 🎛 tenant level ignore terms release date jul 29, 2024 say goodbye to unnecessary noise in your event logs with tenant level ignore terms this new feature allows you to filter out irrelevant events across your entire tenant, making it easier to focus on the threats that matter most each tenant can now define up to 100 ignored terms , with each policy supporting up to 50 terms tenant level ignored terms help filter out events across all identifiers in the tenant, while identifier level ignored terms filter out events for one identifier feed at a time once an ignore term is added, all future events containing that term will be filtered out, and we can even remove up to 100,000 past events from your logs that match the term rest assured—filtered events won’t trigger alerts, affect stats, or appear in searches within your tenant check out the documentation https //docs flare io/policies for more details and a helpful faq june 2024 📉 footprint chart decommission release date june 12, 2024 to simplify the user experience, we’ve removed the footprint and history charts from the platform these charts will no longer appear on the footprint and history pages, nor can they be added to reports however, you can still access the exposure score graph on the dashboard for relevant insights 🛡 secure access through mfa release date june 10, 2024 we’ve enhanced multi factor authentication (mfa) across the platform to protect sensitive user data and ensure compliance with the new pricing model this includes resolving the api loophole related to bypassing rate limits through password logins 🧠 threat flow data improvements release date june 7, 2024 we’ve added a classifier to threat flow to filter out irrelevant posts, such as simple "thank you" messages, leading to cleaner, more relevant data for analysis this optimization allowed us to integrate six new data sources , including breachforums , bhf io , dread , hacktown , secretforum , and rutor , giving you even more actionable intelligence 🗂 ransomware file improvements release date june 7, 2024 our ransomware file coverage has increased by 40% , and we've added ui/ux improvements, including better support for long file paths and new file types ( 7z and rar) we’ve also added a left side ellipsis for better visibility of important file details and improved tooling for handling ransomware archives 📥 takedown improvements release date june 6, 2024 we’ve revamped the takedown request process to give our customer facing teams more control and flexibility the takedown workflow is now powered by hubspot, providing a seamless ticketing experience that reduces the need for developer involvement may 2024 🔍 search in feeds release date may 30, 2024 searching within your tenant , group , or identifier just got easier! we've added the ability to search specific content across your entire tenant, making it faster to find what you need plus, stats load faster, and remediated/ignored events are now easier to browse and scale april 2024 🎨 ui reskinning (cycles 18 19) release date apr 26, 2024 our flare ui has received a major upgrade, with modernized elements for a cohesive and professional look updates include icons, toolbars, event cards, tables, dashboards, modals, tabs, menus, buttons, and more built on a new design system to support a streamlined and scalable user experience moving forward 🔑 azure tenant identifier type release date apr 25, 2024 introducing the azure tenant identifier for enhanced monitoring behaves similarly to keyword identifiers but includes identifier recommendations links monitored domains to an azure tenant, with related domains automatically suggested ideal for detecting secrets on platforms like github, even when domains aren’t explicitly mentioned 🔒 supply chain ransomware exposure monitoring release date apr 15, 2024 customers with supply chain monitoring permission will now have enriched data and visualization options enhanced data added country , industry , and company size details via people data labs new search bar easily search items within the monitoring table four new widgets top countries, top industries, exposures in the last year, and victims per country map guided onboarding a banner now offers educational onboarding for feature setup victim metadata victim names appear in card titles, and detailed metadata is available in event views this feature is now fully available, with the beta tag removed 📄 threat flow custom reports (early access) release date apr 15, 2024 our custom reports feature is in early access for selected customers and internal users you can generate tailored reports by inputting specific keywords into threat flow, creating customized insights for your needs 🔍 credential browser (beta) release date apr 11, 2024 the credential browser beta is here, making it easier to manage and track leaked credentials convenient browsing interface provides a holistic view of an organization’s leaked credentials ignore/remediate actions ignore entire identity names (e g , emails) or remediate specific credentials for better long term tracking note filtering by password policy will be added in a future update ⚙️ collection tooling improvements release date apr 1, 2024 we’ve streamlined our collection infrastructure for dark web sources simplified source configuration new codehooks make source management cleaner improved coverage around 30 sources were optimized, including cebulka and germania, addressing critical login and data integration issues march 2024 🔐 manage identifier limits at the tenant level release date mar 1, 2024 allows identifier limits to be managed by tenant within an organization, ensuring each tenant has visibility only on their allocated identifiers february 2024 🔒 supply chain ransomware exposure release date feb 27, 2024 enhanced monitoring capabilities to support supply chain ransomware exposure detection , providing critical insights into potential vulnerabilities 📊 reports – improved layouts release date feb 27, 2024 reports received a visual refresh for a cleaner, more professional layout, making data presentation clearer and easier to navigate 🔐 leaked credentials improvements – phase 1 feb 27, 2024 improvements to leaked credential alerts, including new entry tracking and adding tags or notes to leak events phase 2 will add options to ignore or remediate leak items 🔎 new search bar full release feb 29, 2024 a new search bar offers an enhanced event search and filtering experience with improved layout and usability 📢 webhook alert channel release date feb 23, 2024 introducing a generic webhook integration that lets customers receive alerts in any service that supports webhooks, adding flexibility in alerting options ⚡️ threat flow release date feb 26, 2024 threat flow’s latest release focuses on transparency and real time threat intelligence with access to raw data sources for in depth cybersecurity insights 🔐 phishing websites via meta facebook ads release date feb 19, 2024 a new feature that tracks phishing websites promoted via meta facebook ads for improved phishing detection 🔍 stealer log improvements coverage, speed, and ux release date feb 19, 2024 (new logs) | apr 12, 2024 (all logs) stealer logs from the new live pipeline now load faster with enhanced ui for better browsing this ui will be applied to all previous logs in april after re importing ⚙️ api improvements release date feb 19, 2024 we’ve added api usage tracking and rate limiting by organization to improve api security and control additionally, api access permissions can now be managed at the org level