Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Patrick Vandenberg
From Awareness to Action: Operationalizing Threat Intelligence Improves Security Posture
October is National Cybersecurity Awareness Month, and we are here to celebrate. But this year, we want to move beyond slogans alone. For over two decades, National Cybersecurity Awareness Month has existed to spotlight the importance of everyday decisions that underpin safety both online and on connected devices. Over the years, it has transformed from a largely consumer-centric event to one encompassing the broader actions of business and critical infrastructure.
Beyond the Arrival: What Security Leaders Must Prioritize in an Agentic AI Era | Cyware
Agentic AI is moving past theory into reality. It’s already embedded into today’s enterprise environments. Autonomous agents are being trialled across customer service, code generation, SOC automation, and cyber threat intelligence. And these systems are quickly becoming available from technology vendors, but the question security leaders must answer isn’t whether to use them, but how to adopt them safely and strategically. This blog focused on securing AI agents, versus security from agents.
Unlocking Secure AI-Powered Threat Intelligence with the Cyware MCP Server
Instead of crafting a complex CQL query, an analyst can simply ask: “Show me all Emotet-related IOCs from the past 30 days and enrich them with VirusTotal data.” In just a few seconds, the system returns exactly what they need - intel fetched, enrichment applied, and correlations highlighted, all without the analyst having to write any queries or perform the enrichment manually. This is the experience the Cyware Model Context Protocol (MCP) Server delivers.
From Intelligence Silos to Autonomous Collaboration: The Next Leap in Cyber Threat Intelligence
Patrick Vandenberg Senior Director, Product Marketing, Cyware September 5, 2025 Most organizations now have access to threat intelligence, but leveraging that intelligence in isolation is no longer enough. This blog explores how progressing along the threat intelligence maturity curve, from ingesting feeds to automated, cross-industry collaboration, can transform security in your organization.
AI is the Engine, Not the Chassis: Why Your Threat Intelligence Platform is More Indispensable Than Ever
The cybersecurity landscape is abuzz with AI. From autonomous detection to predictive analytics, the promises are grand, and the discussions pervasive. But amidst this excitement, a critical misconception has taken root: the idea that Artificial Intelligence will simply replace the foundational capabilities of cybersecurity platforms, such as Threat Intelligence Platforms (TIPs). Let's put this into perspective with a simple analogy.
Black Hat 2025: Key Takeaways and the Future of AI in Cyber Threat Intelligence
If anyone still wasn’t sure, Black Hat 2025 confirmed that agentic AI is no longer just an emerging concept in cybersecurity; it's a central force reshaping the industry's operational paradigm. This year’s conference marked a clear progression from traditional automation tools toward the strategic rise of semi-autonomous, agentic AI-powered threat intelligence platforms.
Agentic AI in Cyber Threat Intelligence: What to Expect at Black Hat 2025
For over two decades, Black Hat has served as cybersecurity's crystal ball, offering a glimpse into the technologies that will define our industry's future. As we prepare for Black Hat 2025, I’m seeing a shift that goes far beyond the AI hype cycles of recent years. We are moving from the experimental phase of AI-enhanced security tools to the strategic deployment of truly autonomous, agentic AI-powered threat intelligence platforms.
Introducing the Cyware Intelligence Suite: The Threat Intel Program-in-a-Box, Reimagined
Patrick Vandenberg Senior Director, Product Marketing, Cyware July 29, 2025 For years, building a threat intelligence program meant stitching together dozens of tools-feeds, sandboxes, enrichment connectors, dashboards, automation rules, and more-while grappling with configuration delays and integration gaps. Threat intel teams spent months just to reach a functional baseline, let alone value.
How Does Cyware Support Threat Intelligence Sharing Among Stakeholders?
No organization can operate in isolation, and this is especially true in threat intelligence. The ability to share timely, actionable threat intelligence is critical to enabling collective defense within and across sectors and geographies. However, many organizations struggle with fragmented, manual, and insecure methods of sharing threat data, leaving them vulnerable to advanced cyber threats. This is where Cyware steps in.
What Are Playbooks in Cybersecurity and How Do They Aid in Incident Management?
When a security incident strikes, every second counts. The difference between a minor disruption and a catastrophic breach often lies in how quickly and effectively an organization can respond. This is where cybersecurity playbooks become invaluable assets, serving as the strategic blueprints that guide security teams through the chaos of incident response.
How Cyware Delivers on Gartner’s Cyber Threat Intelligence Roadmap | Cyware
Patrick Vandenberg Senior Director, Product Marketing, Cyware July 17, 2025 Gartner recently released a report on the future impact of AI on threat intelligence (TI), and the need to implement it now. Emerging Tech: The Future of Cyberthreat Intelligence reveals that in light of the rapid adoption of AI throughout the threat landscape, TI platforms are going to have to incorporate AI technology into their walk and talk as soon as possible.
How Does Bi-Directional Threat Intelligence Sharing Work?
Patrick Vandenberg Senior Director, Product Marketing, Cyware July 17, 2025 Imagine a security operations center (SOC) detecting logs of suspicious domain activity targeting their organization. Rather than acting in isolation, they report the malicious indicators to their sector’s ISAC. Within minutes, that intelligence is anonymized, enriched, and pushed out to hundreds of peer organizations.
What Is the Difference Between Tactical, Operational, and Strategic Cyber Threat Intelligence? | Cyware
Today’s threat landscape is dynamic and accelerating. From zero-day exploits to AI-augmented attacks, protecting organizations today relies on detecting and responding to threats faster than ever. But amid all the noise, even the most threat-aware organizations struggle with a core problem: turning raw intelligence into action. Cyber Threat Intelligence (CTI) is the key to shifting from reactive firefighting to proactive defense.
Exposure Management vs. Digital Risk Protection vs. Vulnerability Management
You Can’t Secure What You Don’t See On today’s digital battlefield, threats are everywhere, and they're not waiting for an invitation. Malicious actors are growing bolder, stealthier, and more strategic. They’re not just breaking in, they’re logging in, exploiting blind spots, and slipping through the cracks in systems, software, and defenses.
How to Evaluate Your Threat Intel Platform Vendor
Is your threat intelligence program guiding and empowering your security team, or unfortunately just giving them more work to do? If your platform feels more like an outdated, manual or time consuming, fragmented, and slow, it’s time to rethink what “good” looks like in threat intelligence. Today’s threat landscape moves fast. Your intel platform should too.
Why Your Threat Intelligence Program Is Failing—and How to Fix It in Days, Not Months | Cyware
Most organizations’ threat intelligence programs are failing because they were not rolled out ready – they were rolled out ready to tinker with, as I’ve stated in a previous blog. This would be fine if today’s organizations had time to do that, but as any SOC can attest, they don’t. This leads to the perception of cyber threat intelligence (CTI) programs as clunky, tech-heavy platforms that function more as a long-term investment than a “right now” solution. That needs to change.
Threat Intelligence Platform | Cyware
When we buy a car, we’re not just buying a machine—we’re buying the ability to get from point A to B. Sure, we might tweak it for comfort or performance, but the expectation is clear: once we own it, we use it. Now imagine this: you buy that car, start making monthly payments… but can’t drive it for six months. Instead, you’re told it needs extensive setup, modifications, and tuning before it’s road-ready. Frustrating, right?
AI-Driven Threat Intelligence | Cyware
Today, attacks are faster, more complex, and more persistent than ever. Organizations without the ability to give and receive threat intelligence in real-time will increasingly lag behind in their capacity to make informed decisions. And yet, threat intelligence sharing comes down to much more than moving large blocks of data; it means delivering that threat data in the form of actionable insights that can actually do the other party some good – not give it more work to sift through and analyze.
Alert Fatigue in Cybersecurity
If one is good, then a thousand must be better—right? Ask any SOC manager, and they’ll tell you that rule only applies to days off, not the flood of threat alerts drowning their teams daily. Security teams are bombarded with mountains of threat intelligence, yet the real challenge isn’t collecting data—it’s making sense of it.
Dr. Cole is in the House at IBM Think
People often ask me what the most critical item for success is. My answer is “thinking” time. Everyone is so busy these days that we often take random action without really considering the consequences or the solution. There is probably no better illustration of this than the current state of cybersecurity. Why is it that companies spend millions of dollars on security and have a large team focusing on security, but still suffer a breach?
Four Reasons Why I'm Excited About IBM Think 2018
I will be attending IBM Think 2018 next week, and I hope to meet some of my readers there. The event offers attendees the opportunity to learn about new developments in many areas of study, rub elbows with technology experts and peers, attend illuminating sessions and much more. Without further ado, here are the top four reasons why I really love this particular conference. Often I attend conferences that focus on a single area of technology.
Great Expectations: Building a Winning Cybersecurity Franchise With a Security Operations Center
As a die-hard hockey fan and coach, I often like to think of things in terms in sports. When you think about it, cybersecurity teams and professional sports teams aren’t all that different. If you are a fan of a professional sports franchise, you are well-aware of your expectations for your favorite team every year. Without question, you make an emotional investment at the start of the season, cheering your team on to combat the opposition on a nightly or weekly basis.
Elevating Education at Think 2018 on the Security and Resiliency Campus
Click here to read all our Think 2018 content — and save $300 if you register now with promo code TK18SECCOM. Earlier in my life, I used to think of Las Vegas much like everyone else that’s seen the “What happens in Vegas” ads: wild partying, befeathered showgirls and Elvis. I even entertained renewing my wedding vows in the Elvis Chapel there for my 10th anniversary, something my parents did for their 40th anniversary.
What is Threat Intelligence Operationalization and Why Does it Matter?
On June 27, 2017, a seemingly routine update from the Ukrainian accounting software M.E. Doc detonated the NotPetya pseudo‑ransomware on a single endpoint inside Maersk’s Odessa office in Ukraine. A single domain controller, left unpatched despite Microsoft’s MS17‑010 patch having been published on March 14, 2017, and widely distributed in every commercial threat intelligence feed after the WannaCry outbreak, became the beachhead.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Patrick
Contact Patrick, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack