All Posts
ThreatStream
1
min read

Shadowserver Intelligence Reports Are Now Available For Free in ThreatStream

Published on
February 24, 2025
Table of Contents

Daily intelligence reports from Shadowserver are now available as a free threat intelligence feed in the Anomali Preferred Partner store – enabling customers to create free daily potential attack surface reports and identify potential malware and other malicious activities relevant to their network or constituency.

About Shadowserver Network Reporting

The Shadowserver Foundation is a nonprofit security organization dedicated to bringing malicious activities and abusable vulnerabilities to light, expediting their remediation, and helping to better secure the Internet. The organization sends custom remediation reports to more than 9,000 vetted subscribers, including national governments, network providers, enterprises, financial and academic institutions, law enforcement agencies, and more.

Shadowserver’s Network Reports are detailed, targeted, relevant, free, and actionable. The report data is sourced from daily Internet-wide scans, honeypot sensors, sinkholes, sandboxes, blocklists, and many other sources.

Activating Shadowserver Reports in ThreatStream

Activating Shadowserver reporting in ThreatStream is free and easy. ThreatStream users can simply:

  1. Sign up for Shadowserver reporting here
  2. Obtain your Secret Key and API Token
  3. Active the Shadowserver APP Store Tile within Threatstream and submit your credentials to start receiving alerts

Shadowserver delivers new reports every day, which ThreatStream correlates with other intelligence sources, deduplicates, and contextualizes.

You can visit the Shadowserver website to learn more about their network reporting, or schedule a demo with Anomali to see how ThreatStream provides curated access to the industry's largest global repository of threat intelligence – which now includes Shadowserver reporting.

FEATURED RESOURCES

August 18, 2026
Anomali Cyber Watch

Anomali Cyber Watch: AmnesiaStealer - Credential Theft Meets Live Browser Hijacking on macOS, Akira Ransomware Deploys Safe Mode to Evade Detection, but Encryption Fails, and more

AmnesiaStealer: Credential Theft Meets Live Browser Hijacking on macOS, Akira Ransomware Deploys Safe Mode to Evade Detection, but Encryption Fails, DeadLock Ransomware Uses Decentralized Infrastructure to Evade Takedown Efforts, ShieldBreak: Researcher Publishes Patch Bypass Claim for Microsoft Defender Zero-Day CVE-2026-50656, Zoom Patches High-Severity Annotation Vulnerabilities Enabling Remote Code Execution Across Multiple Product Lines, Autonomous Multi-Agent AI Framework Achieves Confirmed Compromises Against Taiwanese Government Networks
Read More
August 11, 2026
Operationalized Threat Intelligence
Agentic SOC

OCSF, Explained: Why a Common Schema Changes How Security Teams Work

How a vendor-neutral schema turns fragmented telemetry into data your analysts, detections, and AI agents can all read.
Read More
August 11, 2026
Anomali Cyber Watch

Anomali Cyber Watch: Your AI Clicked Something, Your Dev Tools Have Worms, and the Hotel Wi-Fi Was Literally a Spy

Midnight Blizzard's CaptiveCrunch Campaign Turns Hotel Wi-Fi Into an Espionage Tool. AI Cyber Testing Incidents Multiply as Frontier Models Reach Real Systems and People. ChainDrop Worm Turns Developer Tools Into a Self-Spreading Supply Chain Threat. N-able N-central Authentication Bypass Under Active Exploitation. DOUBLECUP ClickFix Loader-as-a-Service Delivers CountLoader and DeviceManager RATs. Zero-Click Indirect Prompt Injection Attacks Target AI Agentic Browsers, Enabling Account Takeover and Unauthorized Actions.
Read More
Explore All