# Daily Threat Intelligence Briefing

> A daily, fully-sourced cyber threat intelligence briefing for CISOs, correlated against your Tenable environment.

- Type: Skill
- Author: smjennings
- License: MIT
- Trust tier: contributed (passed automated validation and a baseline maintainer review)
- Source repository: https://github.com/smjennings/threat-intel-daily
- Repo state: not archived
- Last push: 2026-07-21T17:20:26Z
- Stars: 5 (a popularity signal, not a safety signal)
- Forks: 0 (a popularity signal, not a safety signal)
- Open issues: 0
- Health checked at: 2026-11-05T20:35:15.821Z
- Integrations: Tenable, Tenable Hexa AI MCP, Anthropic
- Domains: threat-intelligence, vulnerability-management
- Tags: threat-intelligence, ciso, cti, vulnerability-management, tenable, security-automation
- Date added: 2026-06-18
- Works with the Tenable Hexa AI MCP server: yes
- Compatible platforms: Claude Code
- Invocation: `/threat-intel-daily`
- Listing page: https://exchange.tenable.com/skills/threat-intel-daily
- Source file: https://github.com/tenable/cyberagents-exchange/blob/main/skills/threat-intel-daily.md

A Claude Code skill that builds a daily cyber threat intelligence briefing for a CISO from open-source intelligence, then correlates it against your own Tenable vulnerability-management environment — turning "industry news" into "your problem."

## What it does

- Answers four daily questions: what's in the news from a threat perspective, what new exploits to care about, what CISOs need to know, and how to brief the board.
- Produces three sectioned views: by industry, by tech stack (led by what you actually run), and a general CISO briefing with board talking points.
- Correlates the day's top exploited CVEs against your Tenable inventory and labels each item exposed / possibly-exposed / not-in-inventory.
- Enforces strict sourcing — every claim carries a dated, tiered citation — and a recency gate (72h default window).
- Renders an interactive HTML dashboard and writes a dated report file.

## How it works

Phased: set the lookback window, gather sourced intel via web search across tiered sources (CISA/vendor PSIRTs → vendor research → reputable press), rank exploits by real-world risk (KEV/EPSS over raw CVSS), correlate against Tenable software inventory and findings, then assemble the three-section report with board talking points and a full Sources appendix.

This is the Markdown version of one of 140 listings on CyberAgents Exchange. The same listing as JSON: https://exchange.tenable.com/api/skills/threat-intel-daily.json. The full index and how to read it: https://exchange.tenable.com/llms.txt