r/threatintel
17k members
r/threatintel is a subreddit with 17k members. The most common kinds of discussions are advice requests and solution requests, and the community frequently discusses threat intel, phishing, apt 5, ai, and vulnerability.
Sharing of information about threats, vulnerabilities, tools and trends across the security industry.
Popular Themes in r/threatintel
#1
Advice Requests
: "New to Threat Intel - I mostly forward vulns to VM and IOCs to SOC. How can I add more value?"
13 posts
#2
Solution Requests
: "I made an app to categorise news article by Mitre ATT&CK tactics/techniques"
8 posts
#3
News
: "Security Advisory: OpenClaw is spilling over to enterprise networks"
5 posts
#4
Self-Promotion
: "Built a hands-on CTI training platform, looking for people to break it and tell me what's missing"
3 posts
Popular Topics in r/threatintel
#1
Threat Intel
: "New to Threat Intel - I mostly forward vulns to VM and IOCs to SOC. How can I add more value?"
7 posts
#2
Phishing
: "Fable 5 blocks 100% of malware generation attempts but still falls for Phishing, new red team study finds"
5 posts
#3
Apt 5
4 posts
#4
Ai
: "Ai assistant invents npm packages that don't exist — and attackers are registering those names with malware. I built ghostimport to catch them. Need testers & help evolving the risk-scoring."
3 posts
#5
Vulnerability
3 posts
#6
Malware
: "[Malware Analysis] Keylogger Found on Major US Bank's Employee Store (200k+ Potential Victims)"
2 posts
#7
Malicious
: "Database of Malicious Chrome/Edge extensions - auto-updated daily"
2 posts
#8
M365
: "Sneaky 2FA campaign using trusted sender abuse, tenant-branded M365 pages, and live Entra credential replay"
2 posts
#9
Fortibleed
: "OpSec Fail: Fortibleed actors left their server open. Turns out it's Lynx/INC Ransomware targeting NATO defense infrastructure."
2 posts
#10
Threat Actor
2 posts
Flair Used in r/threatintel
#1
Help/Question
: "Former CTI analyst turned leader, now back to CTI - feeling lost"
30 posts
#2
APT/Threat Actor
: "Got mass-BCC'd by an extortion crew trying to use me as a pressure channel against their victim"
16 posts
#3
OSINT
: "Perplexity is an OSINT tool"
13 posts
#4
CVE Discussion
: "New source to follow weekly trending vulnerabilities (CVE)"
5 posts
Member Growth in r/threatintel
Yearly
+8k members(81.8%)
Similar Subreddits to r/threatintel
r/blackhat
114k members
9.6% / yr
r/blueteamsec
70k members
26.2% / yr
r/CTI
1k members
46.9% / yr
r/Cybersecurity101
62k members
204.2% / yr
r/CyberSecurityAdvice
136k members
34.0% / yr
r/pwnhub
41k members
398.3% / yr
r/redteamsec
52k members
26.9% / yr
r/SecOpsDaily
13k members
598.9% / yr
r/SecurityBlueTeam
21k members
16.7% / yr
About
GummySearch helps people research Reddit communities by organizing activity, growth, themes, and post-level signals into one place.
This page gives a focused view of r/threatintel, including current member size, discussion patterns, product reviews, and related communities to explore.
This data is synced periodically so insights stay current and useful for ongoing research.
Last updated: August 6, 2026