This can include all sorts of information which will help indentify new threats and risks or advise of new vulnerabilities found in software the organisation is running. Essentially any intelligence which helps to reduce risk by preventing or detecting an attack should be in scope. Sources should include