All Posts
ThreatStream
1
min read

New in ThreatStream: Falconfeeds.io Intelligence

Published on
November 6, 2025
Table of Contents

Falconfeeds.io is the latest addition to ThreatStream's leading repository of global threat intelligence sources, and includes a massive database of real-time threat intelligence from over 10M+ global sources across dark web, deep web, and open channels.

Falconfeeds.io is an automated threat intelligence service that vigilantly monitors and delivers the latest security incidents and insights on threat actors from around the globe, around the clock. Their expansive coverage includes threat data from the surface web, deep web, dark web, Tor networks, Telegram channels, and other hidden sources, and surfaces real-time alerts through proactive threat intelligence gathering.

Activating Falconfeeds Intelligence in ThreatStream

As a premium feed, activating Falconfeed's intelligence requires a subscription to Falconfeed's Unified Threat Intelligence Pipeline. Setting up the feed in ThreatStream is quick and easy – users simply activate the Falconfeeds tile within the ThreatStream APP store and provide their Token from Falconfeeds.

A screenshot of the Falconfeeds integration in the ThreatStream APP Store

Get Started with Falconfeeds and ThreatStream

Visit the Falconfeeds website to learn more about its threat intelligence offerings, or schedule a demo with Anomali to see how ThreatStream provides access to the industry's largest curated global repository of threat intelligence, including new premium intel from Falconfeeds.

FEATURED RESOURCES

August 11, 2026
Operationalized Threat Intelligence
Agentic SOC

OCSF, Explained: Why a Common Schema Changes How Security Teams Work

How a vendor-neutral schema turns fragmented telemetry into data your analysts, detections, and AI agents can all read.
Read More
August 11, 2026
Anomali Cyber Watch

Anomali Cyber Watch: Your AI Clicked Something, Your Dev Tools Have Worms, and the Hotel Wi-Fi Was Literally a Spy

Midnight Blizzard's CaptiveCrunch Campaign Turns Hotel Wi-Fi Into an Espionage Tool. AI Cyber Testing Incidents Multiply as Frontier Models Reach Real Systems and People. ChainDrop Worm Turns Developer Tools Into a Self-Spreading Supply Chain Threat. N-able N-central Authentication Bypass Under Active Exploitation. DOUBLECUP ClickFix Loader-as-a-Service Delivers CountLoader and DeviceManager RATs. Zero-Click Indirect Prompt Injection Attacks Target AI Agentic Browsers, Enabling Account Takeover and Unauthorized Actions.
Read More
August 4, 2026
Anomali Cyber Watch

Anomali Cyber Watch: TA488 Exploits OWA Cross-Site Scripting, Certighost Domains Hijack, TELESHIM Abuses Telegram, and more

TA488 Exploits OWA Cross-Site Scripting Flaw to Deploy OWAReaper JavaScript Implant, New Certighost PoC Exploit Lets Attackers Hijack Windows Domains, TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments, Chinese-Speaking Threat Actor Deploys Autonomous AI-Driven Attack Campaign, Nested Trust: HollowFrame's Layered Loader and Matryoshka Backdoors, Custom Backdoor Toolkit Targets Central Asian Government Networks in Cyber-Espionage Campaign
Read More
Explore All