Systems and methods for artificial intelligence-based cybersecurity threat intelligence

A system, comprising:

• a memory;
• and
• a processing device, coupled to the memory, configured to perform operations comprising:
• generating, using an artificial intelligence (AI) model, a first object embedding of a first threat intelligence (TI) data object, wherein the first TI data object comprises first one or more cybersecurity attributes of a business entity;
• obtaining a plurality of second object embeddings, wherein:
• each second object embedding represents a respective second TI data object, and
• the respective second TI data object includes second one or more cybersecurity attributes of a cybersecurity threat;
• for each second object embedding, generating a respective similarity value reflecting a similarity between the first object embedding and the respective second object embedding;
• ranking, based on the similarity values, a plurality of second TI data objects;
• and
• identifying, based on the ranking, a subset of the plurality of second TI data objects that are relevant to the first TI data object.

A non-transitory computer-readable storage medium comprising instructions that, when executed by a processing device, cause the processing device to:

• generating, using an artificial intelligence (AI) model, a first object embedding of a first threat intelligence (TI) data object, wherein the first TI data object comprises first one or more cybersecurity attributes of a first cybersecurity threat;
• obtaining a plurality of second object embeddings, wherein:
• each second object embedding represents a respective second TI data object, and
• the respective second TI data object includes second one or more cybersecurity attributes of a second cybersecurity threat;
• for each second object embedding, generating a respective similarity value reflecting a similarity between the first object embedding and the respective second object embedding;
• ranking, based on the similarity values, the plurality of second TI data objects;
• and
• identifying, based on the ranking, a subset of the plurality of the second TI data objects that are relevant to the first TI data object.