r/threatintel

18k members
r/threatintel is a subreddit with 18k members. The most common kinds of discussions are advice requests and solution requests, and the community frequently discusses threat intel, phishing, apt 5, ai, and vulnerability.
Sharing of information about threats, vulnerabilities, tools and trends across the security industry.

Popular Themes in r/threatintel

#1
Advice Requests
: "Best courses or training to learn dark web monitoring for CTI?"
6 posts
#2
Solution Requests
: "Alternatives to hunt.io"
3 posts
#3
Self-Promotion
: "Built a hands-on CTI training platform, looking for people to break it and tell me what's missing"
3 posts
#4
Pain & Anger
: "OSHit. This is bad..."
1 post

Popular Topics in r/threatintel

#1

Threat Intel

: "How do you show Threat Intel value to execs without calling it a return?"
9 posts
#2

Phishing

: "Fable 5 blocks 100% of malware generation attempts but still falls for Phishing, new red team study finds"
5 posts
#3

Apt 5

: "Investigation into Apt 5 and their inner workings of PLA Troop 61786"
4 posts
#4

Ai

: "Ai assistant invents npm packages that don't exist — and attackers are registering those names with malware. I built ghostimport to catch them. Need testers & help evolving the risk-scoring."
3 posts
#5

Vulnerability

: "Share Point Vulnerability"
3 posts
#6

M365

: "Sneaky 2FA campaign using trusted sender abuse, tenant-branded M365 pages, and live Entra credential replay"
2 posts
#7

Fortibleed

: "OpSec Fail: Fortibleed actors left their server open. Turns out it's Lynx/INC Ransomware targeting NATO defense infrastructure."
2 posts
#8

Threat Actor

: "Does anyone have information about the Threat Actor Antonkill?"
2 posts
#9

Cve

: "Inside Cve-2026-16232: Technical analysis of Check Point's actively exploited authentication bypass"
2 posts
#10

Training

: "Built a hands-on CTI Training platform, looking for people to break it and tell me what's missing"
2 posts

Flair Used in r/threatintel

#1
Help/Question
: "How do you show threat intel value to execs without calling it a return?"
21 posts
#2
APT/Threat Actor
: "Got mass-BCC'd by an extortion crew trying to use me as a pressure channel against their victim"
13 posts
#3
OSINT
: "Each one of these women took their own lives after being abused by a NJ porn company called D&E Media that commits real sexual assault in their videos. The owner claims to work for US Counterintelligence. I'm told he does. There are 1,000+ survivors. This is big."
5 posts
#4
CVE Discussion
: "CVSS score vs Attack Class"
3 posts

Member Growth in r/threatintel

Yearly
+8k members(81.5%)

Similar Subreddits to r/threatintel

/r/blackhat

r/blackhat

114k members
9.5% / yr
/r/blueteamsec

r/blueteamsec

70k members
26.0% / yr
/r/CTI

r/CTI

1k members
47.5% / yr
/r/Cybersecurity101

r/Cybersecurity101

63k members
206.2% / yr
/r/CyberSecurityAdvice

r/CyberSecurityAdvice

136k members
34.0% / yr
/r/pwnhub

r/pwnhub

42k members
399.2% / yr
/r/redteamsec

r/redteamsec

52k members
26.3% / yr
/r/SecOpsDaily

r/SecOpsDaily

13k members
604.7% / yr
/r/SecurityBlueTeam

r/SecurityBlueTeam

21k members
16.6% / yr

About

GummySearch helps people research Reddit communities by organizing activity, growth, themes, and post-level signals into one place.

This page gives a focused view of r/threatintel, including current member size, discussion patterns, product reviews, and related communities to explore.

This data is synced periodically so insights stay current and useful for ongoing research.

Last updated: August 11, 2026