Jump to content

Recorded Future: Difference between revisions

From Wikipedia, the free encyclopedia
Browse history interactively
← Previous edit
Content deleted Content added
VisualWikitext
acquisition complete
 
(74 intermediate revisions by 48 users not shown)
Line 1: Line 1:
{{Advert|date=November 2018}}{{Infobox company
{{Short description|American cybersecurity company}}
{{Infobox company
| name = Recorded Future, Inc.
| name = Recorded Future, Inc.
| logo = RF-Logo.png
| logo = RF-Logo-Standard.png
| logo_size = 225px
| logo_size = 200px
| type = [[Privately held company|Private]]
| logo_caption =
| industry = [[Cybersecurity]], threat intelligence
| image =
| foundation = {{Start date and age|2009}}
| image_caption =
| founders = [[Christopher Ahlberg]] <br> Staffan Truvé
| trading_name =
| native_name =
| native_name_lang = <!-- Use ISO 639-1 code, e.g. "fr" for French. Enter multiple names in different languages using {{tl|lang}}, instead. -->
| romanized_name =
| former_name =
| former type =
| type = [[Privately Held]]
| traded_as =
| industry = [[Internet]]
| genre = <!-- Only used with media and publishing companies -->
| fate =
| predecessor =
| successor =
| foundation = 2009
| founders = [[Christopher Ahlberg]], Staffan Truvé
| defunct = <!-- {{End date|YYYY|MM|DD}} -->
| location_city = [[Somerville, Massachusetts]]
| location_city = [[Somerville, Massachusetts]]
| location_country = United States
| location_country = [[United States]]
| locations = [[Washington, D.C.]],<br>[[Gothenburg, Sweden]],<br>[[London, United Kingdom]],<br>[[Singapore]],<br>[[Tokyo, Japan]]
| locations =
| area_served = Worldwide
| area_served = Worldwide
| key_people =
| key_people =
| products = Intelligence Cloud, Brand Intelligence, SecOps Intelligence, Identity Intelligence, Vulnerability Intelligence, [[Attack Surface]] Intelligence, Third-Party Intelligence, Payment Fraud Intelligence
| products = Recorded Future
| num_employees = 1,000 (July 2023)
| brands =
| parent = [[Mastercard]]
| production =
| homepage = {{URL|https://www.recordedfuture.com/}}<BR>{{URL|https://therecord.media/}}
| services =
| revenue =
| operating_income =
| net_income =
| aum = <!-- Only for financial services companies -->
| assets =
| equity =
| owner =
| num_employees = 200 <small>(May 2018)</small>
| divisions =
| subsid =
| homepage = {{URL|https://www.recordedfuture.com/}}
| footnotes =
| intl =
| bodystyle =
}}
}}
'''Recorded Future, Inc.''' is an American privately held [[cybersecurity]] company founded in 2009, with headquarters in [[Somerville, Massachusetts]].
'''Recorded Future''' is an internet technology company founded in 2009, based in [[Somerville, Massachusetts]], United States, and [[Gothenburg]], Sweden, specializing in real-time threat intelligence. Recorded Future automatically organizes open web, dark web, and technical sources for analysis so information security teams can stay ahead of cyberattacks. The company has close links with [[In-Q-Tel]], [[CIA]]’s investment arm, and [[Google Ventures]].<ref>{{cite news|last1=Hardy|first1=Quentin|title=Crushing the Cost of Predicting the Future|url=https://bits.blogs.nytimes.com/2011/11/17/crushing-the-cost-of-predicting-the-future/|accessdate=13 January 2018|work=The New York Times|date=17 Nov 2011}}</ref> In January 2018, the company announced Fusion — a new product that makes Recorded Future "the only end-to-end solution for threat intelligence on the market."<ref>{{cite news|author1=Recorded Future|title=Recorded Future Launches Fusion to Deliver the First Universal Threat Intelligence Solution|url=https://www.prnewswire.com/news-releases/recorded-future-launches-fusion-to-deliver-the-first-universal-threat-intelligence-solution-300589223.html|accessdate=January 29, 2018|date=January 29, 2018}}</ref><!-- NOTE: Remove [[predictive analytics]] per https://www.washingtonpost.com/news/volokh-conspiracy/wp/2014/08/03/as-evidence-mounts-its-getting-harder-to-defend-edward-snowden/ -->


==Services==
==History==
In 2007, co-founders [[Christopher Ahlberg]] and Staffan Truvé, both Ph.D.s in [[computer science]] from [[Chalmers University of Technology]], filed for Recorded Future's first [[patent]] (granted in 2013 as [[United States patent]] US8468153B2) – Data Analysis System with Automated Query and Visualization Environment Setup.<ref>{{Cite web|url=https://patents.google.com/patent/US8468153|title=Information service for facts extracted from differing sources on a wide area network}}</ref> The patent was used for continuous collection and processing of data and information from sources across the open, [[Deep web|deep]], and [[dark web]], facilitated by machine learning. Recorded Future was officially incorporated in 2009.<ref>{{Cite web |title=Recorded Future acquired by private equity firm for $780 million |url=https://www.techtarget.com/searchsecurity/news/252464256/Recorded-Future-acquired-by-private-equity-firm-for-780-million |access-date=2022-06-24 |website=SearchSecurity |language=en}}</ref>
Using what they call a "Temporal Analytics Engine," Recorded Future provides forecasting and analysis tools to help analysts predict future events by scanning sources on the internet, and [[Data mining|extracting]], [[Network theory#Link analysis|measuring]], and [[Data visualization|visualizing the information]] to show networks and patterns in the past, present, and future.<ref>{{cite journal|last1=Holliday|first1=Maynard|last2=Holden|first2=Chris|title=Advanced Web-Based Temporal Analytics for Arms Control Verification and Compliance|journal=Science & Diplomacy|date=July 15, 2014|volume=3|issue=3|url=http://www.sciencediplomacy.org/article/2014/advanced-web-based-temporal-analytics-for-arms-control-verification-and-compliance}}</ref> {{as of|2015}}, the engine was described as "Web Intelligence Engine."<ref name=bweek/> Likewise, the ''Washington Post'', in an article authored by [[Stewart Baker]] - the former General Counsel of the [[National Security Agency]] (1992–1994), which had described the company as a [[predictive analytics]] web intelligence firm deleted the term upon request of RF.<ref name=wp>{{cite news|author1=Stewart Baker|title=As evidence mounts, it’s getting harder to defend Edward Snowden|url=https://www.washingtonpost.com/news/volokh-conspiracy/wp/2014/08/03/as-evidence-mounts-its-getting-harder-to-defend-edward-snowden/|accessdate=31 May 2015|work=Washington Post|date=August 3, 2014|quote=“While this may seem like splitting hairs, in the world of data analysis software “predictive analytics” has specific technical meaning which implies something different. We use the term web intelligence to reduce this confusion.”}}</ref>
The software analyzes sources and forms "invisible links" between documents to find links that tie them together and may possibly indicate the entities and events involved. Noah Schachtmann from ''WIRED'' – who first wrote about Google and the CIA both investing in RF – described the company in an interview as follows: "Recorded Future is a company that strips out from web pages the sort of who, what, when, where, why — sort of who’s involved, [...] where are they going, what kind of events are they going to."<ref name=dn>{{cite news|author1=Amy Goodman, Juan González|title=Google Teams Up with CIA to Fund "Recorded Future" Startup Monitoring Websites, Blogs & Twitter Accounts|url=http://www.democracynow.org/2010/7/30/google_teams_up_with_cia_to|accessdate=May 31, 2015|work=Democracy Now|date=July 30, 2010}}</ref>


The company received initial funding from [[Google]] and [[In-Q-Tel]], which was reported in a July 2010 introduction to Recorded Future published by ''[[Wired (magazine)|Wired]]''.<ref>{{cite magazine|last1=Shachtman|first1=Noah|title=Exclusive: Google, CIA Invest in 'Future' of Web Monitoring|url=https://www.wired.com/2010/07/exclusive-google-cia/|magazine=WIRED|date=July 28, 2010}}</ref>
Clients initially included the financial sector with [[Quantitative investing|quantitative investors]], but since 2013 they have changed to businesses seeking [[cyber security]], per Ahlberg, for example [[SITA (IT company)]], a global air transport IT company.<ref name=bi/>

When it decided that its [[algorithms]] and [[visualization software]] matched needs within the [[intelligence assessment|intelligence]] community,<ref>{{cite news|last1=Temple-Raston|first1=Dina|title=Predicting The Future: Fantasy Or A Good Algorithm?|url=https://www.npr.org/2012/10/08/162397787/predicting-the-future-fantasy-or-a-good-algorithm|work=NPR|date=October 8, 2012}}</ref> Recorded Future entered the [[cyber threat intelligence]] market in January 2012.

In 2014, the company launched Recorded Future Dark Web, integrating open and [[dark web]] sourcing as well as dark web forum access and analysis.

In 2016, Recorded Future was named a partner for threat intelligence by [[Splunk]],<ref>{{cite web |url=https://www.recordedfuture.com/splunk-announcement/ |title=Announcing Recorded Future for Splunk|last=Kodama |first=Matt |date=February 22, 2016 |website=Recorded Future |access-date=January 2, 2020 |quote=Enrichment dashboards show intel on-demand inside Splunk, while monitoring and correlation dashboards apply our threat intel to your events and infrastructure.}}</ref> [[Palo Alto Networks]],<ref>{{cite web|url=https://www.recordedfuture.com/palo-alto-networks-announcement/|title=Announcing Recorded Future for Palo Alto Networks|last=Wong |first=Glenn |date=April 4, 2016 |website=Recorded Future |access-date=January 2, 2020 |quote=We’re very excited to join the Palo Alto Networks NextWave Technology Partners Program.}}</ref> and [[Vencore]] [[Geospatial intelligence|GEOINT]].<ref>{{cite web |url=https://www.recordedfuture.com/vencore-announcement/|title=Announcing Recorded Future and Vencore GEOINT Partnership |last=McKeon |first=Amanda |date=May 17, 2016 |website=Recorded Future |access-date=January 2, 2020 |quote=We’re very excited to announce a partnership with Vencore to combine our unique open source intelligence (OSINT) datasets with its geospatial system integration and analytic capabilities.}}</ref>

In May 2017, Recorded Future introduced Insikt Group,<ref>{{Cite press release|last=Future|first=Recorded|title=Recorded Future Launches Threat Research Arm to Enhance Threat Intelligence Offering|url=https://www.prnewswire.com/news-releases/recorded-future-launches-threat-research-arm-to-enhance-threat-intelligence-offering-300454937.html|access-date=2021-03-11|website=www.prnewswire.com|language=en}}</ref> the company's threat intelligence research arm. The word "insikt" is [[Swedish language|Swedish]], a nod to Recorded Future's co-founders, and means "insight." Insikt Group is responsible for delivering analyst-generated assessments, insights, and recommended actions to customers and the public.

In May 2019, [[New York City|New York]]-based private equity firm [[Insight Partners]] acquired Recorded Future for $780 million.<ref name="TechCrunch">{{cite news|last1=Miller|first1=Ron|title=Insight Partners acquires threat intel company Recorded Future for $780M|url=https://techcrunch.com/2019/05/30/insight-partners-bags-threat-intel-company-recorded-future-for-780m/|work=TechCrunch|date=May 30, 2019}}</ref>

In November 2019, the company opened a second office in Somerville with the goal of building a "campus" in the [[Davis Square]] area. Recorded Future currently employs more than 430 people around the world.<ref>{{cite news|last1=Maffei|first1=Lucia|title=Threat intel firm to open new office, add 130 jobs in the Boston area|url=https://www.bizjournals.com/boston/news/2019/10/28/threat-intel-firm-to-open-new-office-add-130-jobs.html|work=Boston Business Journal|date=October 28, 2019}}</ref>

In 2020, the company announced the establishment of ''[[The Record by Recorded Future|The Record from Recorded Future News]]'', a cybersecurity focused news outlet.<ref>{{Cite web |title=Launching the Cyber Intelligence News Site The Record |url=https://www.recordedfuture.com/podcast-episode-172 |access-date=2022-06-24 |website=www.recordedfuture.com |language=en}}</ref>

In April 2023, the company launched Recorded Future AI, built on a trained OpenAI GPT model which combines insight from Insikt Group with over 100 terabytes of text, images, and technical data, the Recorded Future Intelligence Cloud.<ref>{{Cite web |last=eliasgroll |date=2023-04-11 |title=Recorded Future offers peek at the AI future of threat intelligence |url=https://cyberscoop.com/recorded-future-openai-gpt-intelligence/ |access-date=2023-07-14 |website=CyberScoop |language=en-US}}</ref>

In September 2024, [[MasterCard]] acquired Recorded Future for $2.65 billion.<ref>{{Cite web |date=September 12, 2024 |title=Mastercard bolsters threat intelligence capabilities with $2.65 billion deal for Recorded Future |url=https://www.reuters.com/markets/deals/mastercard-buy-threat-intelligence-company-recorded-future-265-bln-2024-09-12/ |publisher=[[Reuters]] |author=Arasu Kannagi Basil}}</ref>

==Products==
The company specializes in the collection, processing, analysis, and dissemination of threat intelligence. Recorded Future uses [[machine learning]] and [[natural language processing]] methods to continuously collect and organize data from open web, dark web, and technical sources. The resulting information is displayed within a [[software-as-a-service]] portal.

Recorded Future's product is called the Recorded Future Intelligence Cloud.

Using what they call a "Temporal Analytics Engine," Recorded Future provides forecasting and analysis tools to help analysts predict future events by scanning sources on the internet, and [[Data mining|extracting]], [[Network theory#Link analysis|measuring]], and [[Data visualization|visualizing the information]] to show networks and patterns in the past, present, and future.<ref>{{cite journal|last1=Holliday|first1=Maynard|author-link1=Maynard Holliday
|last2=Holden|first2=Chris|title=Advanced Web-Based Temporal Analytics for Arms Control Verification and Compliance|journal=Science & Diplomacy|date=July 15, 2014|volume=3|issue=3|url=http://www.sciencediplomacy.org/article/2014/advanced-web-based-temporal-analytics-for-arms-control-verification-and-compliance}}</ref> {{as of|2015}}, the engine was described as "Web Intelligence Engine."<ref name=bweek/> Likewise, in an article in the ''Washington Post'' authored by former General Counsel of the [[National Security Agency]] [[Stewart Baker]], described the company as a [[predictive analytics]] web intelligence firm but deleted the term upon request of Recorded Future.<ref name=wp>{{cite news|author1=Stewart Baker|title=As evidence mounts, it's getting harder to defend Edward Snowden|url=https://www.washingtonpost.com/news/volokh-conspiracy/wp/2014/08/03/as-evidence-mounts-its-getting-harder-to-defend-edward-snowden/|access-date=31 May 2015|newspaper=Washington Post|date=August 3, 2014|quote=“While this may seem like splitting hairs, in the world of data analysis software “predictive analytics” has specific technical meaning which implies something different. We use the term web intelligence to reduce this confusion.”}}</ref> The software analyzes sources and forms "invisible links" between documents to find links that tie them together and may possibly indicate the entities and events involved.

Clients initially included the financial sector with [[Quantitative investing|quantitative investors]], with the company transitioning in 2013 to providing [[cyber security]] solutions, to companies such as [[SITA (IT company)|SITA]].<ref name=bi/>


==Organization==
==Organization==
The company was founded in 2009 by [[Christopher Ahlberg]]<ref name=bweek>{{cite web |accessdate=July 29, 2010 |url=http://investing.businessweek.com/businessweek/research/stocks/private/snapshot.asp?privcapId=104756879 |title=Recorded Future, Inc. |work=BusinessWeek }}</ref> and had 20 employees as of November 2011.<ref name=wireduk>{{cite web |accessdate=December 25, 2011 |url=https://www.wired.co.uk/magazine/archive/2011/12/features/the-news-forecast |title=The News Forecast |work=Wired UK |date=November 10, 2011 |author=Cheshire, Tom }}</ref> Google Ventures and In-Q-Tel invested "under $10 million each" into the Recorded Future shortly after the company was founded. [[Google]] published this on May 3, 2010<ref>{{cite web |accessdate=July 29, 2010 |url=http://www.nydailynews.com/money/2010/05/04/2010-05-04_google_invests_in_company_that_tries_to_predict_the_future.html |title=Google invests in company, Recorded Future, that tries to predict the future |work=The New York Daily News |date=May 4, 2010 |author=Mastrull, Amanda }}</ref> In-Q-Tel is an investment arm of the CIA.<ref name=wired>{{cite web |accessdate=July 29, 2010 |url=https://www.wired.com/dangerroom/2010/07/exclusive-google-cia/ |title=Exclusive: Google, CIA Invest in ‘Future’ of Web Monitoring |work=Wired |date=July 28, 2010 |author=Shachtman, Noah }}</ref>
The company was founded in 2009 by [[Christopher Ahlberg]]<ref name=bweek>{{cite web |access-date=July 29, 2010 |url=http://investing.businessweek.com/businessweek/research/stocks/private/snapshot.asp?privcapId=104756879 |archive-url=https://web.archive.org/web/20110314220310/http://investing.businessweek.com/businessweek/research/stocks/private/snapshot.asp?privcapId=104756879 |url-status=dead |archive-date=March 14, 2011 |title=Recorded Future, Inc. |work=BusinessWeek }}</ref> and had 20 employees as of November 2011.<ref name=wireduk>{{cite magazine |access-date=December 25, 2011 |url=https://www.wired.co.uk/magazine/archive/2011/12/features/the-news-forecast |title=The News Forecast |magazine=Wired UK |date=November 10, 2011 |author=Cheshire, Tom }}</ref> Google Ventures and [[In-Q-Tel]] invested "under $10 million each" into the Recorded Future shortly after the company was founded. [[Google]] published this on May 3, 2010<ref>{{cite web |access-date=July 29, 2010 |url=http://www.nydailynews.com/money/2010/05/04/2010-05-04_google_invests_in_company_that_tries_to_predict_the_future.html |title=Google invests in company, Recorded Future, that tries to predict the future |work=The New York Daily News |date=May 4, 2010 |author=Mastrull, Amanda }}</ref> In-Q-Tel is an investment arm of the CIA.<ref name=wired>{{cite magazine |access-date=July 29, 2010 |url=https://www.wired.com/dangerroom/2010/07/exclusive-google-cia/ |title=Exclusive: Google, CIA Invest in 'Future' of Web Monitoring |magazine=Wired |date=July 28, 2010 |author=Shachtman, Noah}}</ref> {{as of |2015}}, it had partnerships with IBM, HP [[ArcSight]], Cimation, Ethnographic Edge, Tiberium Security, and Malformity Labs LLC per its company profile published by Businessweek.<ref name=bweek/>
{{as of |2015}}, it had partnerships with IBM, HP [[ArcSight]], Cimation, Ethnographic Edge, Tiberium Security, and Malformity Labs LLC per its company profile published by Businessweek.<ref name=bweek/>


==Analysis ==
==Analysis ==
=== China Vulnerability Database Report===
In November 2017, Recorded Future published analysis asserting that the [[Ministry of State Security (China)]] influences or alters their National Vulnerability Database (CNNVD) to coverup espionage activities.<ref name=RF2017>{{cite web|author1=Recorded Future|url=https://www.recordedfuture.com/chinese-mss-vulnerability-influence/|publisher=Recorded Future|accessdate=November 17, 2017|date=November 20, 2017|title=China’s Ministry of State Security Likely Influences National Network Vulnerability Publications}}</ref> The analysis concludes "vulnerabilities commonly exploited by malware linked to Chinese APT groups" are inconsistent with CNNVD publication practices. The company presented further analysis in March 2018 at the [[Kaspersky Labs]] Analyst Summit, presenting evidence that the Chinese government retroactively changed the original publication dates.<ref name=RF2017b>{{cite web|author1=ALFRED NG|url=https://www.cnet.com/news/china-isnt-being-honest-with-its-vulnerabilities-database/|publisher=CNET|accessdate=March 8, 2018|date=March 9, 2018|title=China isn’t being honest with its vulnerabilities database}}</ref><ref name=RF2017c>{{cite web|author1=Insikt|url=https://www.recordedfuture.com/chinese-vulnerability-data-altered/|publisher=Recorded Future|accessdate=March 8, 2018|date=March 9, 2018|title=China Altered Public Vulnerability Data to Conceal MSS Influence}}</ref>


=== Al-Qaeda Report===
===Red Echo Report===
In 2021, Recorded Future's Insikt Group identified the China-linked group RedEcho, which targeted 10 distinct Indian organizations in the power generation and transmission sector and two organizations in the maritime sector.<ref name=RedEcho>{{cite web|url=https://www.nytimes.com/2021/07/21/podcasts/the-daily/chinese-microsoft-hack.html|publisher=NY Times|date=March 1, 2021|title=China Appears to Warn India: Push Too Hard and the Lights Could Go Out}}</ref>
In May 2014, Recorded Future released a report called "How Al-Qaeda Uses Encryption Post-Snowden (Part 1)."<ref name=RFMay2014>{{cite web|author1=C|url=https://www.recordedfuture.com/al-qaeda-encryption-technology-part-1/|publisher=Recorded Future|accessdate=August 14, 2014|date=May 8, 2014|title=How Al-Qaeda Uses Encryption Post-Snowden (Part 1)|quote=The timeline above tells a compelling story showing how four to five months after the Snowden disclosures both mainstream AQ, as well as the break-off group ISIS, launches three new encryption tools.}}</ref> Part 2 of the report was released on August 1, 2014, supposedly with a strengthened "earlier hypothesis about Snowden leaks influencing [[Al-Qaeda]]’s crypto product innovation." On the same day [[National Public Radio]] aired Recorded Future claims of "tangible evidence" that [[Edward Snowden]] harmed national security by prompting terrorists to develop more sophisticated encryption programs.<ref name=npr>{{cite news|author1=Dina Temple-Raston|title=Big Data Firm Says It Can Link Snowden Data To Changed Terrorist Behavior|url=https://www.npr.org/blogs/thetwo-way/2014/08/01/336958020/big-data-firm-says-it-can-link-snowden-data-to-changed-terrorist-behavior|accessdate=August 14, 2014|work=Morning Edition|agency=National Public Radio|date=August 14, 2014}}</ref>
[[Glenn Greenwald]] and Andrew Fishman criticized Recorded Future's report did not prove causation between Snowden's leak and improved encryption by al-Qaeda.<ref name=greenwald>{{cite web|author1=Glenn Greenwald|author2=Andrew Fishman|title=NPR Is Laundering CIA Talking Points to Make You Scared of NSA Reporting|url=https://firstlook.org/theintercept/2014/08/12/nprs-dina-temple-raston-passed-cia-funded-nsa-contractor-independent-fear-monger-snowden-reporting/|website=The Intercept|publisher=First Look Productions, Inc.|accessdate=August 14, 2014|date=August 12, 2014}}</ref>


=== Occupy Wall Street Media Monitoring Report===
===China Vulnerability Database Report===
In November 2017, Recorded Future published analysis asserting that the [[Ministry of State Security (China)]] influences or alters their National Vulnerability Database (CNNVD) to coverup espionage activities.<ref name=RF2017>{{cite web|author1=Recorded Future|url=https://www.recordedfuture.com/chinese-mss-vulnerability-influence/|publisher=Recorded Future|access-date=November 17, 2017|date=November 20, 2017|title=China's Ministry of State Security Likely Influences National Network Vulnerability Publications}}</ref> According to the analysis, "vulnerabilities commonly exploited by malware linked to Chinese APT groups" are incompatible with CNNVD publication practices. The company presented further analysis in March 2018, at the [[Kaspersky Labs]] Analyst Summit, presenting evidence that the Chinese government retroactively changed the original publication dates.<ref name=RF2017b>{{cite web|author1=ALFRED NG|url=https://www.cnet.com/news/china-isnt-being-honest-with-its-vulnerabilities-database/|publisher=CNET|access-date=March 8, 2018|date=March 9, 2018|title=China isn't being honest with its vulnerabilities database}}</ref><ref name=RF2017c>{{cite web|author1=Insikt|url=https://www.recordedfuture.com/chinese-vulnerability-data-altered/|publisher=Recorded Future|access-date=March 8, 2018|date=March 9, 2018|title=China Altered Public Vulnerability Data to Conceal MSS Influence}}</ref>
In 2011, Recorded Future reported, "... gaining online momentum for the [[Occupy Wall Street]] movement. When we look more carefully at influencers in this discussion using our Influencer Map, we find that Iran [[Press TV]] is the second largest influencer after the U.S. media!"<ref name=RF2011>{{cite web|author1=Holden|url=https://www.recordedfuture.com/irans-growing-influence-occupy-wall-street-protests/|publisher=Recorded Future|accessdate=August 14, 2014|date=October 1, 2014|title=Iran’s Growing Influence & Occupy Wall Street Protests}}</ref>

===Al-Qaeda report===
In May 2014, Recorded Future released a report called "How Al-Qaeda Uses Encryption Post-Snowden (Part 1)."<ref name=RFMay2014>{{cite web|author1=C|url=https://www.recordedfuture.com/al-qaeda-encryption-technology-part-1/|publisher=Recorded Future|access-date=August 14, 2014|date=May 8, 2014|title=How Al-Qaeda Uses Encryption Post-Snowden (Part 1)|quote=The timeline above tells a compelling story showing how four to five months after the Snowden disclosures both mainstream AQ, as well as the break-off group ISIS, launches three new encryption tools.}}</ref> Part 2 of the report was released on August 1, 2014, supposedly with a strengthened "earlier hypothesis about Snowden leaks influencing [[Al-Qaeda]]’s crypto product innovation." On the same day [[National Public Radio]] aired Recorded Future claims of "tangible evidence" that [[Edward Snowden]] harmed national security by prompting terrorists to develop more sophisticated encryption programs.<ref name=npr>{{cite news|author1=Dina Temple-Raston|title=Big Data Firm Says It Can Link Snowden Data To Changed Terrorist Behavior|url=https://www.npr.org/blogs/thetwo-way/2014/08/01/336958020/big-data-firm-says-it-can-link-snowden-data-to-changed-terrorist-behavior|access-date=August 14, 2014|work=Morning Edition|agency=National Public Radio|date=August 14, 2014}}</ref> [[Glenn Greenwald]] and Andrew Fishman criticized Recorded Future's report did not prove causation between Snowden's leak and improved encryption by al-Qaeda.<ref name=greenwald>{{cite web|author1=Glenn Greenwald|author2=Andrew Fishman|title=NPR Is Laundering CIA Talking Points to Make You Scared of NSA Reporting|url=https://firstlook.org/theintercept/2014/08/12/nprs-dina-temple-raston-passed-cia-funded-nsa-contractor-independent-fear-monger-snowden-reporting/|website=The Intercept|publisher=First Look Productions, Inc.|access-date=August 14, 2014|date=August 12, 2014}}</ref>

===Occupy Wall Street Media Monitoring Report===
In 2011, Recorded Future reported "gaining online momentum for the [[Occupy Wall Street]] movement. When we look more carefully at influencers in this discussion using our Influencer Map, we find that Iran [[Press TV]] is the second largest influencer after the U.S. media!"<ref name=RF2011>{{cite web|author1=Holden|url=https://www.recordedfuture.com/irans-growing-influence-occupy-wall-street-protests/|publisher=Recorded Future|access-date=August 14, 2014|date=October 1, 2014|title=Iran's Growing Influence & Occupy Wall Street Protests}}</ref>

===China Lockdown Protests Report===
In December 2022, Recorded Future released a report detailing a network of bot account on social media that disseminated spam and irrelevant comments under legitimate posts about the [[2022 COVID-19 protests in China|2022 protests in China]], including posts with hashtags that contained the names of Chinese cities. The report suggests that the Chinese government is the most likely source of the spam attack. The bots used pornography or randomized word strings to divert discussions of protests, targeting Mandarin speakers on a variety of social media platforms.<ref>{{cite web |last1=Milmo |first1=Dan |title=China accused of flooding social media with spam to crowd out protest news |url=https://www.theguardian.com/world/2022/dec/04/china-accused-of-flooding-social-media-spam-covid-protests |work=The Guardian |date=5 December 2022 |access-date=5 December 2022}}</ref>


==Controversies==
==Controversies==
In April 2015, a coding website accused Recorded Future of violating [[internet privacy]] by analyzing private Facebook messages, which it denied. The accusation was disproven when the assumed private link for private Facebook chat was found posted publicly online via a server log.<ref name=bi>{{cite news|author1=Cale Guthrie Weissman|title=Inside the company that can predict the future by analyzing every piece of information on the web |url=http://www.businessinsider.com/recorded-future-can-predict-the-future-by-analyzing-everything-on-the-web-2015-5?op=1|accessdate=May 31, 2015|work=Business Insider|date=May 26, 2015}}</ref>
In April 2015, a coding website accused Recorded Future of violating [[internet privacy]] by analyzing private Facebook messages, which it denied. The accusation was disproven when the assumed private link for private Facebook chat was found posted publicly online via a server log.<ref name="bi">{{cite news |author1=Cale Guthrie Weissman |date=May 26, 2015 |title=Inside the company that can predict the future by analyzing every piece of information on the web |url=http://www.businessinsider.com/recorded-future-can-predict-the-future-by-analyzing-everything-on-the-web-2015-5?op=1 |url-status=live |archive-url=https://archive.today/20240828221603/https://www.businessinsider.com/recorded-future-can-predict-the-future-by-analyzing-everything-on-the-web-2015-5 |archive-date=Aug 28, 2024 |access-date=May 31, 2015 |work=Business Insider}}</ref>


==See also==
==See also==
* [[Open-source intelligence]]
* [[Corporate security]]
* [[Managed security service]]
* [[Operational intelligence]]
* [[Palantir Technologies]]
* [[Intelligence engine]]


==References==
*[[Cyber threat intelligence|Cyber Threat Intelligence]]
*[[Open-source intelligence|Open Source Intelligence]]
*[[Corporate Security]]
*[[Managed Security Service]]
*[[Operational Intelligence]]
*[[Palantir Technologies]]
*[[Intelligence Engine]]s

==References==
{{Reflist|2}}
{{Reflist|2}}

==External links==
* [https://www.recordedfuture.com/ Official Website]
* [https://twitter.com/RecordedFuture Official Twitter Handle]


[[Category:Prediction]]
[[Category:Prediction]]
[[Category:Analytics companies]]
[[Category:Analytics companies]]
[[Category:Companies based in Cambridge, Massachusetts]]
[[Category:Companies based in Middlesex County, Massachusetts]]
[[Category:Software companies based in Massachusetts]]
[[Category:Software companies based in Massachusetts]]
[[Category:Companies established in 2008]]
[[Category:Software companies established in 2009]]
[[Category:Software companies of Sweden]]
[[Category:GV companies]]
[[Category:GV companies]]
[[Category:Data brokers]]
[[Category:Data brokers]]
[[Category:2019 mergers and acquisitions]]
[[Category:2019 mergers and acquisitions]]
[[Category:Somerville, Massachusetts]]
[[Category:Software companies of the United States]]
[[Category:2024 mergers and acquisitions]]

Latest revision as of 01:05, 25 December 2024

Recorded Future, Inc.
Company typePrivate
IndustryCybersecurity, threat intelligence
Founded2009; 15 years ago (2009)
FoundersChristopher Ahlberg
Staffan Truvé
Headquarters
Somerville, Massachusetts
,
United States
Number of locations
Washington, D.C.,
Gothenburg, Sweden,
London, United Kingdom,
Singapore,
Tokyo, Japan
Area served
Worldwide
ProductsIntelligence Cloud, Brand Intelligence, SecOps Intelligence, Identity Intelligence, Vulnerability Intelligence, Attack Surface Intelligence, Third-Party Intelligence, Payment Fraud Intelligence
Number of employees
1,000 (July 2023)
ParentMastercard
Websitewww.recordedfuture.com
therecord.media

Recorded Future, Inc. is an American privately held cybersecurity company founded in 2009, with headquarters in Somerville, Massachusetts.

History

[edit]

In 2007, co-founders Christopher Ahlberg and Staffan Truvé, both Ph.D.s in computer science from Chalmers University of Technology, filed for Recorded Future's first patent (granted in 2013 as United States patent US8468153B2) – Data Analysis System with Automated Query and Visualization Environment Setup.[1] The patent was used for continuous collection and processing of data and information from sources across the open, deep, and dark web, facilitated by machine learning. Recorded Future was officially incorporated in 2009.[2]

The company received initial funding from Google and In-Q-Tel, which was reported in a July 2010 introduction to Recorded Future published by Wired.[3]

When it decided that its algorithms and visualization software matched needs within the intelligence community,[4] Recorded Future entered the cyber threat intelligence market in January 2012.

In 2014, the company launched Recorded Future Dark Web, integrating open and dark web sourcing as well as dark web forum access and analysis.

In 2016, Recorded Future was named a partner for threat intelligence by Splunk,[5] Palo Alto Networks,[6] and Vencore GEOINT.[7]

In May 2017, Recorded Future introduced Insikt Group,[8] the company's threat intelligence research arm. The word "insikt" is Swedish, a nod to Recorded Future's co-founders, and means "insight." Insikt Group is responsible for delivering analyst-generated assessments, insights, and recommended actions to customers and the public.

In May 2019, New York-based private equity firm Insight Partners acquired Recorded Future for $780 million.[9]

In November 2019, the company opened a second office in Somerville with the goal of building a "campus" in the Davis Square area. Recorded Future currently employs more than 430 people around the world.[10]

In 2020, the company announced the establishment of The Record from Recorded Future News, a cybersecurity focused news outlet.[11]

In April 2023, the company launched Recorded Future AI, built on a trained OpenAI GPT model which combines insight from Insikt Group with over 100 terabytes of text, images, and technical data, the Recorded Future Intelligence Cloud.[12]

In September 2024, MasterCard acquired Recorded Future for $2.65 billion.[13]

Products

[edit]

The company specializes in the collection, processing, analysis, and dissemination of threat intelligence. Recorded Future uses machine learning and natural language processing methods to continuously collect and organize data from open web, dark web, and technical sources. The resulting information is displayed within a software-as-a-service portal.

Recorded Future's product is called the Recorded Future Intelligence Cloud.

Using what they call a "Temporal Analytics Engine," Recorded Future provides forecasting and analysis tools to help analysts predict future events by scanning sources on the internet, and extracting, measuring, and visualizing the information to show networks and patterns in the past, present, and future.[14] As of 2015, the engine was described as "Web Intelligence Engine."[15] Likewise, in an article in the Washington Post authored by former General Counsel of the National Security Agency Stewart Baker, described the company as a predictive analytics web intelligence firm but deleted the term upon request of Recorded Future.[16] The software analyzes sources and forms "invisible links" between documents to find links that tie them together and may possibly indicate the entities and events involved.

Clients initially included the financial sector with quantitative investors, with the company transitioning in 2013 to providing cyber security solutions, to companies such as SITA.[17]

Organization

[edit]

The company was founded in 2009 by Christopher Ahlberg[15] and had 20 employees as of November 2011.[18] Google Ventures and In-Q-Tel invested "under $10 million each" into the Recorded Future shortly after the company was founded. Google published this on May 3, 2010[19] In-Q-Tel is an investment arm of the CIA.[20] As of 2015, it had partnerships with IBM, HP ArcSight, Cimation, Ethnographic Edge, Tiberium Security, and Malformity Labs LLC per its company profile published by Businessweek.[15]

Analysis

[edit]

Red Echo Report

[edit]

In 2021, Recorded Future's Insikt Group identified the China-linked group RedEcho, which targeted 10 distinct Indian organizations in the power generation and transmission sector and two organizations in the maritime sector.[21]

China Vulnerability Database Report

[edit]

In November 2017, Recorded Future published analysis asserting that the Ministry of State Security (China) influences or alters their National Vulnerability Database (CNNVD) to coverup espionage activities.[22] According to the analysis, "vulnerabilities commonly exploited by malware linked to Chinese APT groups" are incompatible with CNNVD publication practices. The company presented further analysis in March 2018, at the Kaspersky Labs Analyst Summit, presenting evidence that the Chinese government retroactively changed the original publication dates.[23][24]

Al-Qaeda report

[edit]

In May 2014, Recorded Future released a report called "How Al-Qaeda Uses Encryption Post-Snowden (Part 1)."[25] Part 2 of the report was released on August 1, 2014, supposedly with a strengthened "earlier hypothesis about Snowden leaks influencing Al-Qaeda’s crypto product innovation." On the same day National Public Radio aired Recorded Future claims of "tangible evidence" that Edward Snowden harmed national security by prompting terrorists to develop more sophisticated encryption programs.[26] Glenn Greenwald and Andrew Fishman criticized Recorded Future's report did not prove causation between Snowden's leak and improved encryption by al-Qaeda.[27]

Occupy Wall Street Media Monitoring Report

[edit]

In 2011, Recorded Future reported "gaining online momentum for the Occupy Wall Street movement. When we look more carefully at influencers in this discussion using our Influencer Map, we find that Iran Press TV is the second largest influencer after the U.S. media!"[28]

China Lockdown Protests Report

[edit]

In December 2022, Recorded Future released a report detailing a network of bot account on social media that disseminated spam and irrelevant comments under legitimate posts about the 2022 protests in China, including posts with hashtags that contained the names of Chinese cities. The report suggests that the Chinese government is the most likely source of the spam attack. The bots used pornography or randomized word strings to divert discussions of protests, targeting Mandarin speakers on a variety of social media platforms.[29]

Controversies

[edit]

In April 2015, a coding website accused Recorded Future of violating internet privacy by analyzing private Facebook messages, which it denied. The accusation was disproven when the assumed private link for private Facebook chat was found posted publicly online via a server log.[17]

See also

[edit]

References

[edit]
  1. ^ "Information service for facts extracted from differing sources on a wide area network".
  2. ^ "Recorded Future acquired by private equity firm for $780 million". SearchSecurity. Retrieved 2022-06-24.
  3. ^ Shachtman, Noah (July 28, 2010). "Exclusive: Google, CIA Invest in 'Future' of Web Monitoring". WIRED.
  4. ^ Temple-Raston, Dina (October 8, 2012). "Predicting The Future: Fantasy Or A Good Algorithm?". NPR.
  5. ^ Kodama, Matt (February 22, 2016). "Announcing Recorded Future for Splunk". Recorded Future. Retrieved January 2, 2020. Enrichment dashboards show intel on-demand inside Splunk, while monitoring and correlation dashboards apply our threat intel to your events and infrastructure.
  6. ^ Wong, Glenn (April 4, 2016). "Announcing Recorded Future for Palo Alto Networks". Recorded Future. Retrieved January 2, 2020. We're very excited to join the Palo Alto Networks NextWave Technology Partners Program.
  7. ^ McKeon, Amanda (May 17, 2016). "Announcing Recorded Future and Vencore GEOINT Partnership". Recorded Future. Retrieved January 2, 2020. We're very excited to announce a partnership with Vencore to combine our unique open source intelligence (OSINT) datasets with its geospatial system integration and analytic capabilities.
  8. ^ Future, Recorded. "Recorded Future Launches Threat Research Arm to Enhance Threat Intelligence Offering". www.prnewswire.com (Press release). Retrieved 2021-03-11.
  9. ^ Miller, Ron (May 30, 2019). "Insight Partners acquires threat intel company Recorded Future for $780M". TechCrunch.
  10. ^ Maffei, Lucia (October 28, 2019). "Threat intel firm to open new office, add 130 jobs in the Boston area". Boston Business Journal.
  11. ^ "Launching the Cyber Intelligence News Site The Record". www.recordedfuture.com. Retrieved 2022-06-24.
  12. ^ eliasgroll (2023-04-11). "Recorded Future offers peek at the AI future of threat intelligence". CyberScoop. Retrieved 2023-07-14.
  13. ^ Arasu Kannagi Basil (September 12, 2024). "Mastercard bolsters threat intelligence capabilities with $2.65 billion deal for Recorded Future". Reuters.
  14. ^ Holliday, Maynard; Holden, Chris (July 15, 2014). "Advanced Web-Based Temporal Analytics for Arms Control Verification and Compliance". Science & Diplomacy. 3 (3).
  15. ^ a b c "Recorded Future, Inc". BusinessWeek. Archived from the original on March 14, 2011. Retrieved July 29, 2010.
  16. ^ Stewart Baker (August 3, 2014). "As evidence mounts, it's getting harder to defend Edward Snowden". Washington Post. Retrieved 31 May 2015. "While this may seem like splitting hairs, in the world of data analysis software "predictive analytics" has specific technical meaning which implies something different. We use the term web intelligence to reduce this confusion."
  17. ^ a b Cale Guthrie Weissman (May 26, 2015). "Inside the company that can predict the future by analyzing every piece of information on the web". Business Insider. Archived from the original on Aug 28, 2024. Retrieved May 31, 2015.
  18. ^ Cheshire, Tom (November 10, 2011). "The News Forecast". Wired UK. Retrieved December 25, 2011.
  19. ^ Mastrull, Amanda (May 4, 2010). "Google invests in company, Recorded Future, that tries to predict the future". The New York Daily News. Retrieved July 29, 2010.
  20. ^ Shachtman, Noah (July 28, 2010). "Exclusive: Google, CIA Invest in 'Future' of Web Monitoring". Wired. Retrieved July 29, 2010.
  21. ^ "China Appears to Warn India: Push Too Hard and the Lights Could Go Out". NY Times. March 1, 2021.
  22. ^ Recorded Future (November 20, 2017). "China's Ministry of State Security Likely Influences National Network Vulnerability Publications". Recorded Future. Retrieved November 17, 2017.
  23. ^ ALFRED NG (March 9, 2018). "China isn't being honest with its vulnerabilities database". CNET. Retrieved March 8, 2018.
  24. ^ Insikt (March 9, 2018). "China Altered Public Vulnerability Data to Conceal MSS Influence". Recorded Future. Retrieved March 8, 2018.
  25. ^ C (May 8, 2014). "How Al-Qaeda Uses Encryption Post-Snowden (Part 1)". Recorded Future. Retrieved August 14, 2014. The timeline above tells a compelling story showing how four to five months after the Snowden disclosures both mainstream AQ, as well as the break-off group ISIS, launches three new encryption tools.
  26. ^ Dina Temple-Raston (August 14, 2014). "Big Data Firm Says It Can Link Snowden Data To Changed Terrorist Behavior". Morning Edition. National Public Radio. Retrieved August 14, 2014.
  27. ^ Glenn Greenwald; Andrew Fishman (August 12, 2014). "NPR Is Laundering CIA Talking Points to Make You Scared of NSA Reporting". The Intercept. First Look Productions, Inc. Retrieved August 14, 2014.
  28. ^ Holden (October 1, 2014). "Iran's Growing Influence & Occupy Wall Street Protests". Recorded Future. Retrieved August 14, 2014.
  29. ^ Milmo, Dan (5 December 2022). "China accused of flooding social media with spam to crowd out protest news". The Guardian. Retrieved 5 December 2022.
[edit]
Retrieved from "https://en.wikipedia.org/enwiki/w/index.php?title=Recorded_Future&oldid=1265085893"