Application of OSINT Methods in Ensuring Cybersecurity
Sabina Szymoniak, Kacper Foks, Aleksandra Pyrkosz-Dziubczyk · IPSI Transactions on Internet Research · 2025
Open-source intelligence (OSINT) is a key aspect of contemporary cybersecurity, allowing the collection and analysis of publicly available data to discover potential threats and vulnerabilities within organizations. The increased availability of open data—everything from social media usage to hacked credentials—has made OSINT a musthave for both cyber defence and offence. However, one of the most significant challenges comes from the unregulated nature of opensource data. While existing cybersecurity solutions rely on OSINT for threat intelligence, they are often marred by information overload, dubious data sources, and legal or ethical concerns. Furthermore, the same OSINT methods are leveraged by cybercriminals to gather intelligence on prospective victims to make it easy for them to conduct advanced attacks like spear phishing and reconnaissance-driven intrusions. This paper examines how OSINT can effectively enhance cybersecurity without its drawbacks. By learning from various OSINT tools, techniques, and practical applications, we propose a structured approach to filtering and verifying intelligence to improve threat detection efficiency. Unlike existing solutions, this approach includes leveraging automated processes and contextual verification to limit false positives and stay ethical.