Cyble, Flashpoint, Parsons and VulnCheck

About Flashpoint

Flashpoint sells threat data and intelligence that spans cyber threat intelligence, vulnerability intelligence, geopolitical risk, physical security, fraud and brand protection. Flashpoint addresses complex security challenges faced by commercial enterprises and government agencies. Flashpoint builds its EASM offering natively into Flashpoint Ignite, which brings external attack surface management, cyber threat intelligence, physical security with Echosec, and dark web collections into a single workflow. Flashpoint's team spans 8 countries with 35+ languages spoken.^[1][2][4]

Flashpoint's cyber threat intelligence platform combines primary-source collections, analyst expertise and integrated AI, with access to threat intelligence from open and hard-to-reach adversary spaces. Flashpoint aggregates and analyzes data from the open, deep and dark web to track adversary tactics, expose vulnerabilities and predict attacks. Flashpoint provides intelligence based on an organization's Priority Intelligence Requirements. Flashpoint provides real-time threat alerts based on data from open and dark web sources, illicit forums, groups and other primary sources. Flashpoint analysts sort and prioritize threats most relevant to a customer organization's PIRs.^[1][5][6]

Flashpoint uses Automated Source Discovery technology to discover and rapidly add new sources. Flashpoint makes data analysis-ready by applying Optical Character Recognition, geospatial enrichments and machine-learning tags. Flashpoint delivers finished intelligence to stakeholders through secure channels and integrated platform alerts.^[6]

Flashpoint offers vulnerability intelligence that helps customers prioritize vulnerabilities affecting their organization and gain context for mitigation. Flashpoint's vulnerability intelligence includes 105,000+ vulnerabilities omitted from public databases like the NVD. Flashpoint maintains an independent vulnerability collection called VulnDB that tracks over 449,000+ vulnerabilities. Flashpoint KEV tracks over 5,400+ vulnerabilities backed by real-world threat actor activity and dark web chatter. Flashpoint MCP Server gives customers access to Flashpoint intelligence within AI assistants and AI-native workflows using the Model Context Protocol standard.^[5]

Flashpoint's fraud intelligence provides early-warning signals to help organizations prevent financial fraud. Flashpoint users can run searches for credit card information that aligns with their BIN for automatic detection of accounts at risk. Flashpoint users can search illicit marketplaces for usernames and passwords associated with their company domain or variations. Flashpoint fraud intelligence covers cryptocurrency addresses and transactions within Bitcoin, Ethereum and Monero collections. Flashpoint Fraud Intelligence now includes infostealer data to combat credit card fraud. Flashpoint Compromised Credentials Monitoring allows users to monitor exposure of compromised credentials. Flashpoint offers a customer-focused version that lets organizations monitor for compromised customer credentials.^[7][8]

Flashpoint Physical Security Intelligence gathers data from online sources including mainstream social media, discussion forums, fringe networks, messaging apps and regional sources from around the world. Flashpoint Physical Security Intelligence lets users search, filter, monitor, visualize and analyze the data in a dashboard. Flashpoint Physical Security Intelligence offers access to Flashpoint's specialized intelligence team. Echosec is a web-based open-source intelligence capability used by security and intelligence teams worldwide. Echosec delivers finished intelligence and near real-time data from mainstream social media, fringe networks, news outlets, messaging apps and discussion forums. Flashpoint National Security Intelligence combines data, technology and services to deliver information and intelligence to mission-driven teams in Defense, the Intelligence Community, Law Enforcement, Public Safety, State and Local Government, and Federal Civilian Agencies. Flashpoint also offers insider threat intelligence to detect, monitor and mitigate the misuse of authorized access to networks, systems or assets.^[5][9][10]

Flashpoint points to ransomware and other threats to business continuity and intellectual property as risks for healthcare and pharmaceutical companies. Flashpoint offers monitoring of compromised credential exposure for enterprise domains and customer email addresses. Flashpoint offers expert training, response and recovery to prevent, prepare for and mitigate the impacts of ransomware or extortion attacks. Flashpoint lets customers ask its intelligence analysts questions and receive answers to address intelligence gaps. Flashpoint can anonymously and securely engage with threat actors on a customer's behalf. Flashpoint's attack surface offering is supported by over 100 multidisciplinary intelligence experts who deliver finished reporting, custom investigations and on-demand Requests for Information.^[1][12]

About Parsons

Parsons is a global solutions provider in the national security and critical infrastructure markets that delivers integrated program management solutions. Parsons says its integrated program management solutions turn complex initiatives into measurable results.^[3]

Parsons sells Cyber-Fly-Away Kits (C-FLAK), which the company says have everything a cyber defender needs to efficiently achieve mission success. Parsons sells Cyberzcape for critical infrastructure protection (CIP). Parsons describes Digital Overwatch as a suite of applications, pipelines, analytics, and visual components that enable successful mission execution. Parsons describes its Network Management Solution (NMS) as being at the forefront of protecting Land Mobile Radio (LMR) backhaul networks. Parsons sells DroneArmor, a counter unmanned aircraft systems (CUAS) solution for the security of personnel, bases, and assets from drone threats.^[1][4]

The Dynamic Spectrum Environment Emulator (DYSE) is a RF channel emulator that seeks to imitate realistic RF environments, including congested and contested conditions. RF paths in DYSE can be individually programmable and emulate the impact of real-world operational conditions in a lab environment. Parsons also sells the Threat Representative Environment (TReX), which it describes as a way to experiment, train, and plan signals intelligence (SIGINT) and electronic warfare (EW) operations. TReX is a software and COTS hardware-based signal and channel emulator. Parsons says TReX supports various DoD, IC, and Defense Industrial Base partners, and that TReX can be deployed anywhere from a laboratory to austere environments. The Wireless Instrumented Streaming Platform (WISP) is a portable, remotely controlled wideband RF data capture and analysis tool.^[5][6]

APS operates independently of GPS and other GNSS. Parsons says APS can be implemented as a Parsons hardware and software package or by installing APS application software on compatible non-Parsons user equipment. APS can also be implemented as a plug-in to the Android Team Awareness Kit (ATAK) on a user smartphone.^[8]

Parsons sells the ER310 software-defined radio, a handheld SDR platform designed to host and execute RF applications. Parsons says the ER310 supports missions including assured PNT, RF situational awareness support, electronic warfare, and communications. Peanut SDRs are available in compact enclosures for dismounted and mounted use or as an OEM circuit card. TEMS detects RF spectrum energy in the user's environment and can be controlled using a smart phone.^[8][9][10]

Parsons describes Ace CtrlPoint as an automated space vehicle and ground station command and control (C2) application. Parsons describes C2Core as a combined JADC2 capability suite of command and control tools built by operators for operators and used across multiple domains. Parsons describes Foundation as a cloud-native data integration platform built to address the complexities of government operations. Parsons sells iNET Asset Guardian to monitor, track, and maintain roadway assets and ITS devices. Paradim is a cloud-hosted and software-agnostic asset and data information management solution from Parsons.^[4][11]

Parsons sells SatFlyer, a software toolset that provides full-lifecycle flight-dynamics capabilities, orbit calculation and attitude determination. Parsons provides multi-manifest flight systems and launch integration capabilities to operationalize access to space for small space systems. Parsons operates a systems integration laboratory in Los Angeles, CA.^{[1][4][5][7][8][10][12][13]}

About VulnCheck

VulnCheck sells a Cyber Threat Intelligence platform that provides exploit and vulnerability intelligence for prioritizing and remediating vulnerabilities. VulnCheck's platform supports prioritizing vulnerabilities based on the threat environment and deferring vulnerabilities that do not matter.^[5]

VulnCheck defines TTE (Time-to-Exploitation) as the gap between CVE disclosure and confirmed exploitation. VulnCheck also provides real-time alerting of changes in vulnerabilities, so that customers can take action before attacks start.^[5]

VulnCheck offers Exploit & Vulnerability Intelligence for decisions on which vulnerabilities need immediate remediation. VulnCheck provides early access to new vulnerability information not found in the NVD, along with dozens of unique fields. VulnCheck provides an exploitation timeline covering when a vulnerability was first disclosed, when evidence of exploitation was first discovered and when the vulnerability was remediated. VulnCheck directs remediation effort to vulnerabilities that are being actively exploited in the wild.^[5][15]

VulnCheck develops exploit PoCs, packet captures, and Suricata signatures in house to defend against initial access vulnerabilities. VulnCheck provides data from globally deployed Internet sensors that reveals the first signs of vulnerability exploitation. VulnCheck states that when it is given a CVE, it tells the customer every vulnerable host on the internet right now. VulnCheck for Government includes features, functionality and data available only to VulnCheck's Government partners.^{[5][7][8][16]}

VulnCheck's Initial Access Intelligence team has detailed an unauthenticated pre-auth remote root RCE chain in Control Web Panel. VulnCheck reports third party vulnerabilities.^[1][5][17]

The services are offered by VulnCheck Inc. VulnCheck grants customers a right to access and use the VulnCheck products and services specified in an Order Form. VulnCheck permits its service to be integrated only into customer products that provide substantial additional value independent from the service. Unless an Order Form says otherwise, VulnCheck invoices fees annually in advance, payable in U.S. dollars within thirty (30) days from the date of invoice. VulnCheck provides support, maintenance, and uptime for each service according to the support package selected on the Order Form. VulnCheck may provide upgrades, patches, enhancements, or fixes to its customers generally without additional charge.^{[1][4][5][6][7][8][9][10][11][18]}