OT and IoT security vendor Nozomi Networks rolled out its TI expansion pack. Powered by Mandiant Threat Intelligence, this federated solution helps strengthen and streamline how industrial and enterprise CISOs and their teams can anticipate, diagnose and respond to cyber threats across critical business operations.
Nozomi’s TI expansion pack gives customers the option to enrich their threat intelligence (TI), gaining comprehensive access to real-time information about threats to IT, OT and IoT systems.
“The cybersecurity threat landscape is rapidly evolving, with attacks growing in both number and impact enterprise-wide,” said Edgard Capdevielle, Nozomi’s CEO. “To minimize risk and maximize operational resilience, CISOs and their security teams need comprehensive solutions that enable them to quickly assess and respond to threats across their IT, OT and IoT systems. We are pleased to be able to give our customers the option to easily incorporate Mandiant’s world-class threat intelligence as part of a whole solution that delivers superior security outcomes.”
“For nearly a decade, Mandiant and Nozomi Networks have partnered to deliver advanced, AI-powered OT and IoT security solutions to customers,” said Melissa Smith, Google Cloud’s Head of Strategy & Technology Partnerships. Google acquired Mandiant in 2022. “This latest expansion is another critical step in our journey to combine threat intelligence sources and defenses to deliver the best possible security outcomes for the world’s critical infrastructure. By blending Mandiant’s threat intelligence and expertise with Nozomi Networks’ OT threat intelligence and tools, we can enable critical infrastructure organizations to enhance their threat intelligence and investigations for a stronger defense.”
Nozomi Networks customers looking to gain access to real-time information about IT, OT and IoT system threats can access an integrated threat feed. This extends Nozomi threat intelligence by providing organizations with a deeper understanding of the coinciding IT threat landscape, allowing them to monitor and respond to emerging threats for the strongest possible security outcome.
Additionally, Vantage threat offer a new presentation capability in Nozomi Vantage, the company’s cloud-based OT/IoT cyber management console. Vantage threat cards logically cluster and organize threat data, offering instant access to critical information such as:
- Threat descriptions
- First and last seen dates
- Exploitation status and vectors
- Targeted industries and countries
- MITRE ATT&CK details
- Mitigation suggestions
Vantage threat cards empower OT and IoT cyber teams to scan and filter key threat information, speeding response times and enhancing accuracy. Mandiant Threat Intelligence will be used throughout the Vantage solution, with updates to vulnerability data including:
- Improved CVSS mapping
- Detailed summaries
- Lists of vulnerable products
- Exploitation details
- MITRE ATT&CK details
- Workarounds and vendor fixes
- Links back to Threat Cards and malware groups
These enhancements ensure comprehensive coverage and deeper insight into vulnerabilities, enabling more effective threat management.
The Nozomi TI expansion pack is available now for customers using Nozomi’s on-premise and cloud-based monitoring solutions.
Click here for information on Nozomi’s partner program, and here for Google’s program.