Illustration of a light blue map of Canada with a central padlock symbol, surrounded by red circuit lines connecting cybersecurity icons such as alerts, monitoring, and analytics, representing Cybersecurity Threat Intelligence Services.

Actionable Threat Intelligence Services

Gather, analyze, enrich, and share actionable intel on potential cybersecurity threats and vulnerabilities, to understand the threat landscape, anticipate potential attacks, and take proactive action.

CANARIE’s Threat Intelligence Service helps institutions detect, understand, and respond to emerging threats with greater speed and confidence. By combining global intelligence sources with a distinct Canadian research and education lens, Threat Intel translates raw threat data into operational insight through automated intelligence feeds, curated briefings, trusted community collaboration, and expert analysis.

At the core of this service, the CanSSOC Threat Feed delivers continuously updated, sector-specific threat intelligence that can be directly integrated into existing security tools to support prevention and active defense. More than data alone, the Threat Feed is part of a broader intelligence ecosystem designed to strengthen collective resilience, enable informed decision-making, and reduce the burden on individual security teams.

CANARIE Cyber Threat Intelligence Services

Threat Feed

Threat Feed

The Threat Feed delivers sector-specific threat intelligence to research and education organizations by:

  • Aggregating and curating threat intelligence from government entities, commercial threat intel providers, member institutions, and the open-source community into multiple threat intelligence feeds that can be deployed into an organization’s existing security appliances.
  • Providing monitoring and reporting services to help identify and mitigate potential threats originating from the dark web.

Explore the Threat Feed →

Threat Advisories

Threat Advisories

Advisories are curated vulnerabilities and threats that impact the research and education community, provided in a summarized advisory to inform and alert organizations of high priority cybersecurity issues.

Threat Alerts

Threat Alerts

Threat Alerts deliver targeted communications to individual organizations, such as detected compromised systems or accounts from Dark Web Monitoring and other services.

Dark Web Monitoring

Dark Web Monitoring

Detecting emerging cybersecurity threats on the dark web and proactively monitors for institutional data such as domain names, branding, compromised credentials, and breached third-party suppliers.

Monthly “CHESS”
Threat Sharing Calls

Monthly “CHESS”
Threat Sharing Calls

Canadian Higher Education Security Sessions (CHESS) calls bring the community together each month, in a secure, closed forum to share insights, alerts, and incidents, leveraging collective expertise to strengthen cybersecurity across the sector.

Monthly “CHECKERS”
Threat Sharing Bulletins

Monthly “CHECKERS”
Threat Sharing Bulletins

Cybersecurity Highlights, Emerging Campaigns, Key Exploits, Reports, and Summaries (CHECKERS) is a monthly snapshot of critical threats and insights for Canada’s research and education sector, consolidating cyber threats affecting the research and education sector to support effective communication of these risks across your organization.

Community Slack
Channel

Slack logo

Community Slack
Channel

A national, closed communication channel for real-time collaboration and knowledge exchange.

Built By the Community, for the Community

The premise of CANARIE’s Threat Intelligence Services was created on the principle that no single institution can tackle cybersecurity challenges alone. The vision of Canada’s Shared Security Operations Centre (CanSSOC) lay the groundwork for common cybersecurity tools, knowledge, and awareness across institutions, regardless of their maturity or capability in detection and response.  

What started as a curated Threat Feed to automatically block emerging threats from reaching participating institutions (University of British Columbia, University of Alberta, University of Toronto, McMaster University, Toronto Metropolitan University, and McGill University) has evolved into a powerful model of coordinated and trusted sharing of threats across Canada’s research and education sector – and a robust set of Threat Intelligence Services delivered by CANARIE at no cost to Canadian research and education institutions participating in the Cybersecurity Initiatives Program.  

Participate in CANARIE’s Threat Intelligence Service 

  • If your organization is already participating in CANARIE’s Cybersecurity Initiatives Program (CIP), contact [email protected] to sign up for the Threat Intelligence Service at no cost.