On 18 June 2025, the National Cybersecurity Standardization Committee opened consultation on a national standard on network security technology product interoperability on threat information format, until 17 August 2025. The standard applies to providers of cybersecurity products and services that handle or exchange threat intelligence, including intrusion detection and threat analysis platforms. It proposes a structured format for describing and exchanging threat information, introducing standardised components for threat actors, attack methods, observable data, and events. Updates include expanded application scenarios, revised data models, the addition of components including vulnerabilities and malware analysis.
Original source