Systems | Development | Analytics | API | Testing

TLDR: Product threat intelligence comes from using product specific threat intelligence platforms like PCA CERVUS and is specific to individual products and their parts. Most threat intelligence platforms are built for security operations centres (SOCs) and thus they track attacker infrastructure and campaigns aimed at corporate networks. These platforms are designed to help an SOC defend an organization and give the TTPs needed to run red teaming or pen testing against these environments also.

TLDR: Device specific threat intelligence is provided by using device specific threat intelligence platforms like PCA Cervus that look at component level risks. Device-centric threat intelligence is threat intelligence that focuses specifically on risks to a connected device like a point of sale terminal or a card reader. This post explains what device centric threat intelligence is and how it differs from traditional SOC centric threat intelligence and what to look for in threat intelligence feed so you can be sure it gives device centric intelligence vs generic SOC focused intel.