CORRECTING and REPLACING Cyware Survey Reveals That 92% Believe Threat Intelligence Is Critical — But Most Organizations Still Struggle to Operationalize It
'Threat intelligence isn't just about collecting data — it's about connecting people, processes, and platforms to act on it," said Anuj Goel, Co-founder and CEO of Cyware.
Share
The updated release reads:
Cyware survey identifies significant gaps in internal collaboration, tool integration, and automation — with only 13% confident their systems currently work well
Cyware, the industry leader in threat intelligence operationalization, collaboration, and orchestrated response, today released the results of an onsite survey conducted at RSA Conference 2025. The survey captured insights from 100 cybersecurity executives and professionals across enterprises, government agencies, and service providers about how organizations are operationalizing threat intelligence across their security operations.
The findings reveal a sharp disconnect between awareness and action: While nearly all respondents (92%) said collaboration and information sharing are either 'absolutely crucial' or 'very important' in the fight against cyber threats, the data tells a different story when it comes to the adoption of this practice. Only 13% said their current automation between cyber threat intelligence (CTI) and SecOps tools is working well, and nearly 40% struggle to coordinate data across critical security tools like Threat Intelligence Platforms (TIPs), SIEMs, and vulnerability management platforms.
'The RSAC survey data reveals a serious gap between that belief and the operational reality,' said Anuj Goel, Co-founder and CEO of Cyware. 'Threat intelligence isn't just about collecting data — it's about connecting people, processes, and platforms to act on it. These findings reinforce the need for more unified, automated, and collaborative approaches to security operations.'
Key survey findings:
Internal collaboration and automation maturity remain major gaps: While 92% of respondents said threat intel sharing is 'absolutely crucial' or 'very important,' only 13% said their automation between CTI and SecOps tools is working well.
AI optimism is high, but its implementation is still uneven: 78% of respondents believe AI will improve threat intel sharing within their organization, but only 43% say it's made a meaningful impact so far.
Threat intel sharing is not occurring in real time: Only 17% of teams share threat intel across roles like SecOps, IR, and vulnerability management in real time, while another 25% do so daily. 22% reported sharing information rarely or not at all.
External threat intel sharing collaboration has much room for improvement: While 57% of respondents said their organization collaborates with industry peers to improve threat intel, 30% were unsure if such collaboration even exists.
Automation gaps persist: More than half of respondents (56%) reported either significant or moderate challenges automating workflows across CTI and SecOps teams.
ISAC participation is low or unknown: Only 18% confirmed that their organization is part of an Information Sharing and Analysis Center (ISAC) or Organization (ISAO), while 45% said they didn't know. That lack of clarity could be limiting access to valuable sector-specific threat insights — and further compounding intelligence silos.
The survey results reflect growing urgency to bridge the gap between threat intel awareness and execution. As cyber threats grow more complex and coordinated, Cyware is helping organizations unify threat ingestion, sharing, and response — powered by AI and hyper-automation.
To learn how Cyware is helping organizations transform threat intelligence into coordinated defense, visit www.cyware.com.
About Cyware
Cyware is leading the industry in operational threat Intelligence and collective defense, helping security teams transform threat intelligence from fragmented data points to actionable, real-time decisions. We unify threat intelligence management, intel sharing and collaboration, as well as hyper-orchestration and automation — eliminating silos and enabling organizations to outmaneuver adversaries faster and more effectively.
From enterprises to government agencies and ISACs, Cyware empowers defenders to turn intelligence into impact.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Los Angeles Times
4 minutes ago
- Los Angeles Times
Samsung to make Tesla AI chips in multiyear Texas deal
Samsung Electronics Co. will produce AI semiconductors for Tesla Inc. in a new $16.5 billion pact that marks a win for its underperforming foundry division. South Korea's largest company announced on Monday that it secured the 22.8 trillion won chipmaking agreement, which will run through the end of 2033. The plan is for an upcoming plant in Taylor, Texas, to produce Tesla's next-generation AI6 chip, Tesla chief Elon Musk said on X, confirming a Bloomberg News report. Samsung's Seoul-traded shares rose 6.8% to their highest since September, while its suppliers like Soulbrain Co. jumped 16%. A Samsung spokesperson declined to comment, citing confidentiality terms in its contract. 'The strategic importance of this is hard to overstate,' Musk, 54, wrote on X. He described the value of the deal announced by Samsung as 'just the bare minimum. Actual output is likely to be several times higher.' The Tesla chief executive officer and X owner will walk the chip fabrication line himself and has been authorized by Samsung to assist in optimizing production, he said. The AI6 component will form the foundation of Tesla's driving hardware suite for cars in coming years. Samsung produces the current AI4 system, according to Musk. The contract win, the first after Executive Chairman Jay Y. Lee was cleared of all outstanding legal charges, comes as Samsung has been steadily losing ground in chip manufacturing. The company, which makes its own memory chips and also fabricates semiconductors on behalf of clients, has had difficulty bringing in enough orders to fully utilize its foundry capacity. It has postponed completion of construction and operational ramp-up of its new Texas fab to 2026. 'Their foundry business has been loss-making and struggling with under-utilization, so this will help a lot,' said Vey-Sern Ling, managing director at Union Bancaire Privee in Singapore. 'Tesla's business may also help them to attract other customers.' That's in contrast to leading chipmaker Taiwan Semiconductor Manufacturing Co., which still cannot meet all demand. TSMC held a dominant share of 67.6% of the global foundry market in the first quarter this year, according to Taipei-based TrendForce. Samsung's share slipped to 7.7% from 8.1% in the previous quarter. Samsung and TSMC are both on pace to deliver the next generation of semiconductor advancement — moving to 2-nanometer fabrication — and the new deal is seen as a signal of confidence for the company's upcoming fabrication technology. While the contract may represent a small share of foundry revenue annually, it holds greater value as a catalyst for technological refinement and innovation over the long run, according to Ryu Young-ho, an analyst at NH Investment & Securities Co. It also helps burnish Samsung's reputation as the strongest TSMC alternative at a time when Intel Corp. is struggling to win over investors skeptical about its long-term strategy and road map. At Tesla, Musk has said the company's future will depend on delivering the long-elusive goal of true self-driving technology. Last week, after a disappointing earnings report, he said the automaker will face 'a few rough quarters' until it can deliver autonomous vehicles at scale — which he predicted for the second half of 2026 or by the end of the year. Yet there is still skepticism about that target. Musk's X posts following the Samsung deal imply that Tesla will adopt two different next-generation chips in short order that are crucial to its automated-driving systems. He wrote that the carmaker will go from currently sourcing AI4 chips from Samsung, to using AI5 chips from TSMC that have just been designed, to then using AI6 chips from Samsung. The rapid-fire changes risk opening Tesla up to more blowback from car owners who were told back in 2016 that all the vehicles the company was making from then on had the hardware necessary to eventually drive autonomously. In early 2023, Musk said on an earnings call that Tesla was going to stop offering retrofits to customers whose cars were equipped with older-generation chips, citing the cost and difficulty of offering upgrades. Tesla has made some progress in recent months toward competing with Alphabet Inc.'s Waymo by starting to offer a driverless taxi service in Austin. But the carmaker has yet to offer rides without any safety staff in its vehicles, and early users posted videos of the robotaxis appearing to violate traffic laws. The suite of features Tesla markets as Full Self-Driving still requires customers to supervise the system at all times. Lee and Kang write for Bloomberg.
Business Wire
4 minutes ago
- Business Wire
Dropzone AI Secures $37M Series B, Putting AI Security Analysts on the Front Lines of Cyber Battlefield
SEATTLE--(BUSINESS WIRE)--Dropzone AI, the leading provider of AI SOC analysts, has raised $37 million in Series B funding, led by Theory Ventures and joined by Madrona, Decibel Ventures, Pioneer Square Labs, and IQT. This infusion of funding validates Dropzone AI's unique solution as it leads the market for AI SOC agents, delivering measurable and transformative security outcomes for clients like UiPath, Zapier, Pipe, Assala Energy, and over 100 other enterprises. Their AI-native approach equips security teams with a superior defense - reducing security risks, operational costs, and analyst burnout - uniquely addressing the limitations of legacy cybersecurity solutions. 'Dropzone AI's ability to autonomously triage and investigate security alerts with human-level reasoning is a game-changer in a market that's overwhelmed by alert fatigue and attack frequency," said Vivek Ramaswami, Partner at Madrona Ventures. "At Madrona we look for founders who are passionate about advancing their sector and have the technical ability to do so; Edward exemplifies this pairing of vision and acumen. We're proud to support him and the Dropzone team in building what modern security teams need to stay ahead." According to the 2024 ISC2 Cybersecurity Workforce Study, 67% of respondents face staffing shortages, worsened by layoffs and budget cuts, making it more difficult to secure their organizations and driving interest in AI SOC solutions as leaders recognize the need for fundamental change. Recent Gartner® research1 predicts that, 'multiagent AI in threat detection and incident response will rise from 5% to 70% of AI implementations to primarily augment — not replace — staff.' Additionally, we were recently named a Sample Vendor for AI SOC Agents within the 2025 Gartner® Hype Cycle ™ for Security Operations2. Dropzone AI is at the forefront of this transformative shift in cybersecurity strategies and investments, set to fundamentally redefine cybersecurity operations. 'Dropzone AI SOC analyst's performance is exceptional, delivering detailed, high-fidelity alerts within minutes,' said Andrew Marsh, Director of Information Security at Indiana Farm Bureau Insurance. 'This transparent, rapid processing and accuracy significantly elevates threat response capabilities.' Dropzone AI autonomously investigates security alerts, replicating the techniques of elite analysts and allowing SOCs to achieve coverage and speed that was not previously possible. CBTS, a North American IT services provider, uses Dropzone AI to enhance the efficiency and quality of its managed detection and response service. By offloading 30–50% of alert volume, the platform has significantly reduced repetitive work, allowing the team to focus more on threat hunting, customer onboarding, and improving coverage. 'Today's funding fortifies our market lead,' said Edward Wu, Founder and CEO of Dropzone AI. 'We're driving a generational shift in cybersecurity from manpower-bound, alert-chasing SOC teams to SOC teams backed by an army of autonomous AI agents that get to focus on what truly matters. This change is not optional; it's essential. We exist to level the playing field for cyber defenders, and we can field these next-generation capabilities right now. We know who we're working for. We'll ensure they always outmatch the attackers.' The capital will be deployed across three strategic pillars. First, Dropzone AI will amplify its global footprint to meet surging demands by growing sales, marketing, and customer-success teams, so more security teams can better protect and enable their businesses without large increases in headcount or budget. Second, the company will fast-track the creation of additional specialized, autonomous AI agents for manual security tasks. Finally, it will deepen and extend its roster of ecosystem partnerships and technical integrations, ensuring its solutions can work with security teams of all sizes, tool stacks, and maturity to boost operational efficiency, sharpen threat detection, and drive stronger ROI. "As the AI SOC market has begun to mature, Dropzone has pulled ahead of the pack," said Tomasz Tunguz, General Partner at Theory. "Their AI SOC analysts have been validated by some of the world's largest enterprises and MSSPs, and are in production across dozens of businesses – along with recognition from analyst firms like Gartner and Forrester. Dropzone's sales have taken off as they've established their position as a trusted category leader; we were excited to double down in the Series B to further accelerate their efforts and shape what's next in AI-native security platforms." To learn more about Dropzone AI or to book a demo, please visit: About Dropzone AI Dropzone AI weaponizes LLMs for cyber defenders, equipping them with armies of AI agents so that they can overmatch attackers. With Dropzone autonomously handling routine Tier 1 alert triage, organizations can spend less time on reactive security and more time on proactive security. The Dropzone AI SOC Analyst replicates the techniques of elite analysts and is trusted by more than 100 organizations, including Mysten Labs, Pipe, UiPath, and Zapier. Learn more by visiting ______________________________ 1 Gartner, 'Emerging Tech: Techscape for Detection and Response Startups,' Bhatia, Esha, and Apeksha Kaushik. , March 19, 2025. GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved. 2 Gartner, 'Hype Cycle for Security Operations, 2025,' Nunez, Jonathan, and Darren Livingstone, June 23, 2025. Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. Expand
Geek Wire
4 minutes ago
- Geek Wire
Seattle startup Dropzone raises $37M to supercharge its ‘AI SOC analyst' security software
GeekWire's startup coverage documents the Pacific Northwest entrepreneurial scene. Sign up for our weekly startup newsletter , and check out the GeekWire funding tracker and venture capital directory . The Dropzone team. (Dropzone Photo) Security teams have trouble handling a daily flood of alerts. AI bots can help. That's the premise behind Dropzone AI, a Seattle-based startup that just raised a $37 million Series B round to fuel growth. CEO Edward Wu said the fresh capital gives the company 'capacity and optionality' as it pushes to stay ahead in what he calls the next billion-dollar battleground in cybersecurity. Dropzone's pre-trained AI security agents are designed to act as Tier‑1 SOC (Security Operations Center) analysts. They use large language models and handle repetitive tasks — investigating alerts and escalating incidents that need human review. The agents mimic the thought process and techniques of expert security analysts. The idea is to help alleviate the pressure on security teams as cyber risks rise, and reduce the time needed to respond to threats. Dropzone has more than 100 enterprise customers, from mid-size IT departments to managed security service providers. Clients include UiPath, Zapier, and others. 'This is kind of a needle-mover technology for a lot of different security teams,' Wu said. Revenue more than doubled in Q2 compared to Q1, Wu said. Dropzone AI founder and CEO Edward Wu. (Dropzone Photo) Wu said the system's false‑negative rate is consistently below 1 percent, while false positives drop below 10 percent as the model learns each environment. Dropzone faces growing competition from tech giants like Microsoft and Google, which offer their own autonomous SOC tools, as well as smaller startups. Wu said Dropzone is the only company in its sector that offers a free 'test drive' of its product without needing to talk to a salesperson. 'That has really helped us to show the maturity of our technology,' he said. 'We're not hiding our product behind closed-door demos.' Earlier this year Dropzone rolled out a free browser extension tool called 'Coach' that aims to give security analysts an AI co-worker in their browser. Wu previously spent eight years at Seattle-based security company ExtraHop before launching Dropzone in 2023. Theory Ventures led the Series B round. Madrona, Decibel Ventures, Pioneer Square Labs, and IQT also participated. Dropzone has 28 employees and is actively hiring.
