Workflow enhancement – streamlined threat triage

We’ve enhanced the Threat Management workflow to make it simpler, faster, and more precise. The new layout enhances usability while capturing richer context on how analysts classify and resolve threats.

Key improvements include:

• A single “Manage Threat” dropdown now consolidates all key actions for easier access.
• Actions are grouped under two clear sections: “Collaborate” and “Resolve”, aligning with how analysts naturally work through findings.
• The term “Dismiss” has been renamed to “False Positive” to clarify intent and improve tracking of analyst decisions.
• A new “Risk Accepted” action allows users to distinguish between legitimate but accepted risks and false alerts.
• “Close as Remediated” is now “Remediated”, improving consistency across the workflow.
• The ability to page through threats now sits in the top navigation bar, making navigation more intuitive. When a threat is resolved, the system automatically advances to the next open threat.
• The header is now sticky, with a full-width divider for easier readability as you scroll.
• We’ve also relocated comments to their own tab to provide users with more space to review and collaborate on the details.

These changes make the workflow more intuitive to use while ensuring every analyst action contributes to greater fidelity and insight in our threat intelligence feedback loop.

New Risk: Infostealer malware detected for Vendor Risk

A new risk, “Infostealer Malware Detected,” will now be raised for tiered vendors when data indicates a potential breach from infostealer malware. This high-severity risk helps identify data leakage threats from your vendors. To help users proactively address these items before they impact scores these new risks will initially be flagged as “provisional” until January 2026.

Expanded vendor security document coverage

Our monthly import of public vendor security documents has expanded coverage to include 298 new documents, enhancing the data available in Vendor Security Profiles.

Trial Breach Risk to automate your Security posture in Trust Exchange

Users can now trial Breach Risk in order to enable continuous monitoring for their Trust Exchange security profile, enabling users to improve their security profile and posture with automated score improvements. Breach Risk can then be purchased after the 14 day trial period.

Other improvements

• To better classify upcoming risks, the “Brand Reputation” risk category has been renamed to “Operational Risk”.
• To localise Trust Page settings, the Custom Domain configuration has been moved from General Settings (cogwheel) to “Trust Page -> Settings and More”.
• This release includes a number of bug fixes.