bandjacks

Bandjacks サイバー脅威防御世界モデリングシステム 概要 Bandjacksは、包括的なサイバー脅威インテリジェンス（CTI）システムであり、次の機能を提供します： 脅威レポートからMITRE ATT&CKの手法を12～40秒 で抽出 脅威アクター、手法、防御策の知識グラフを構築 完全な出所追跡機能を備えたSTIX 2.1準拠のバンドルを生成 防御推奨のためのD3FENDオントロジーを統合 ベクトル検索とグラフ分析機能を提供 共起分析 を計算して手法パターンを特定 LLM応答キャッシュにより、従来版よりも抽出速度が94%向上...

deepdarkCTI

deepdarkCTI Deep WebとDark Webからのサイバー脅威インテリジェンスソースのコレクション プロジェクトの公式ウェブサイトは https://www.deepdarkcti.com です。このプロジェクトの目的は、Deep WebおよびDark Webに存在し、サイバー脅威インテリジェンスの文脈で有用なソースを収集することです。 プロジェクトの貢献者（またはサイバー脅威インテリジェンスの分野で活動している人々）は、Telegramグループ...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

loboguara

Lobo Guará - Cyber Threat Intelligence Platform Lobo Guará is a platform aimed at cybersecurity professionals, with various features focused on Cyber Threat Intelligence CTI. It offers tools that make it easier to identify threats, monitor data leaks, analyze suspicious domains and URLs, and much...

priority-intelligence-requirements-dev

制定优先情报需求 @ Red Hat v1.1 在网络威胁情报（CTI）快速演变的格局中，制定优先情报需求（PIRs）是 CTI 项目以及情报周期中规划与方向阶段的关键组成部分。作为网络威胁情报分析师，你很可能熟知这样的挑战：在小型 CTI 团队中，有限的资源与向决策者和利益相关者交付相关、可操作信息的艰巨任务之间如何平衡。这种两难境地常常让团队陷入抉择：是采取被动应对的姿态，在威胁出现时即时响应，还是更倾向于主动的长期优先事项。将 PIRs...

A SoK for SoCs: Reading the TI Leaves on AI for Cyber Threat Intelligence Generation and Sharing

Cyber Threat Intelligence CTI is essential for defending mission-critical infrastructure, yet the process of transforming raw attack evidence into shareable CTI remains fragmented and understudied. We conduct a literature survey of academic papers, organizing the CTI lifecycle into three stages:...

CVE-2026-74001

creationtimestamp| type| source ---|---|--- 2026-08-20 14:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjfrxrrod2f 2026-08-20 14:09:22+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjgckcsc72t...

CVE-2026-75481

creationtimestamp| type| source ---|---|--- 2026-08-18 05:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtdgq4mur527...

CVE-2026-75012

creationtimestamp| type| source ---|---|--- 2026-08-17 20:50:07+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtclcey43n2q...

CVE-2026-65529

creationtimestamp| type| source ---|---|--- 2026-08-12 23:16:21+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mswb5alio52j...

An Automated Framework for Extracting Reachable Attack Chains from Cyber Threat Intelligence Reports

Cyber Threat Intelligence CTI reports richly describe real-world attack processes, but their unstructured narratives cannot be directly used for automated attack-path reasoning. Existing CTI extraction methods focus on indicators, entities, or TTP labels without modeling the execution conditions...

Malicious code in @marketfront/infopopup (npm)

The @marketfront/infopopup package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

What the Numbers Say About FIFA 2026 Cyber Risk

The FIFA World Cup 2026 opened on June 11. By that date, according to Check Point Research, the fraud infrastructure targeting it had already been built, staged, and partially deployed. Threat actor activity was pre-planned, months out, across three sectors and at least ten languages. Check Point...

EDB-42392

creationtimestamp| type| source ---|---|--- 2026-06-30 09:23:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6889a30d-c929-4ab6-a8d5-6557dad98cf8...

TinyML-Driven Cybersecurity for Autonomous Spacecraft: Latency-Accuracy Analysis for SPARTA RF and Cyber Threat Detection

Autonomous spacecraft require rapid, lightweight, and reliable onboard detection of cyber-RF threats. Using the SPARTA attack model, we analyze the latency-accuracy trade-offs of TinyML-compatible classical models -- Random Forest, Logistic Regression, SVM, and MLP -- for detecting uplink jamming...

GenTI: Benchmarking LLMs for Autonomous IDPS Rule Generation for Unseen Attacks

Rule-based Intrusion Detection and Prevention Systems IDPS offer precise attack detection as well as mitigation, however their manually crafted, signature-driven rules limit adaptability to emerging and zero-day threats. Additionally, existing public datasets e.g., CICIDS2017, UNSW-NB15 focus on...

ZERO-APT: A Closed-Loop Adversarial Framework for LLM-Driven Automated Penetration Testing under Intelligent Defense

LLM-driven automated penetration testing agents are typically evaluated against static targets that neither detect nor respond to attacks, so their behavior under intelligent defense remains untested. The causal consistency of multi-step attack chains likewise hinges on unstable LLM reasoning, an...

TTPrint: Evidence-Grounded TTP Extraction Via Diverge-Then-Converge Verification

Extracting MITRE ATT&CK techniques from cyber threat intelligence CTI reports is an open-set, multi-label problem requiring both high recall not missing techniques and high precision not hallucinating unsupported ones. Existing methods--rule-based, supervised, and LLM-based--struggle to achieve...

How to better protect your growing business in an AI-powered world

AI is rapidly reshaping how work gets done in companies and organizations. In celebrating National Small Business Month, we want to acknowledge the unique challenges that growing business leaders face as AI creates both opportunity and risk. They face constant tradeoffs between moving fast,...

Context-Aware Entity-Relation Extraction for Threat Intelligence Knowledge Graphs

Cybersecurity Knowledge Graphs CKGs unify diverse Cyber Threat Intelligence CTI sources into structured, queryable formats, offering scalable solutions for automating proactive and real-time security responses. Their increasing adoption has significantly enhanced the workflow and decision-making...