priority-intelligence-requirements-dev

Desarrollo de Requisitos Prioritarios de Inteligencia @ Red Hat v1.1 En el panorama de la inteligencia de amenazas cibernéticas CTI, por sus siglas en inglés, que evoluciona rápidamente, la formulación de Requisitos Prioritarios de Inteligencia PIRs se presenta como un componente crucial de tu...

loboguara

Lobo Guará - Cyber Threat Intelligence Platform Lobo Guará is a platform aimed at cybersecurity professionals, with various features focused on Cyber Threat Intelligence CTI. It offers tools that make it easier to identify threats, monitor data leaks, analyze suspicious domains and URLs, and much...

bandjacks

Bandjacks 网络威胁防御世界建模系统 概述 Bandjacks 是一个全面的网络威胁情报（CTI）系统，能够： 在 12-40 秒内 从威胁报告中提取 MITRE ATT&CK 技术 构建威胁行为者、技术和防御措施的知识图谱 生成符合 STIX 2.1 的捆绑包，并带有完整的溯源追踪 集成 D3FEND 本体以提供防御建议 提供向量搜索和图分析能力 计算 共现分析 以识别技术模式 通过 LLM 响应缓存，提取速度比早期版本快 94% 包含 Next.js 前端 用于报告审核和分析可视化 📚 文档 指南| 描述 ---|--- 快速开始| 在 5 分钟内启动并运行 完整安装|...

deepdarkCTI

deepdarkCTI 来自深网和暗网的网络威胁情报源集合 本项目官方网站为 https://www.deepdarkcti.com。本项目的目标是收集深网和暗网中可用于网络威胁情报领域的来源。 项目的贡献者（或活跃在网络威胁情报领域的人员）拥有一个 Telegram 群组 ，可用于提出需要集成到项目中的新来源，并提供一个讨论日常研究和分析策略与技巧的空间。 可通过向 https://twitter.com/fastfire 或 https://t.me/fastfire83 或 https://bsky.app/profile/fastfire.bsky.social 发送请求来申请加...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

A SoK for SoCs: Reading the TI Leaves on AI for Cyber Threat Intelligence Generation and Sharing

Cyber Threat Intelligence CTI is essential for defending mission-critical infrastructure, yet the process of transforming raw attack evidence into shareable CTI remains fragmented and understudied. We conduct a literature survey of academic papers, organizing the CTI lifecycle into three stages:...

CVE-2026-74001

creationtimestamp| type| source ---|---|--- 2026-08-20 14:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjfrxrrod2f 2026-08-20 14:09:22+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjgckcsc72t...

CVE-2026-75481

creationtimestamp| type| source ---|---|--- 2026-08-18 05:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtdgq4mur527...

CVE-2026-75012

creationtimestamp| type| source ---|---|--- 2026-08-17 20:50:07+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtclcey43n2q...

CVE-2026-65529

creationtimestamp| type| source ---|---|--- 2026-08-12 23:16:21+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mswb5alio52j...

An Automated Framework for Extracting Reachable Attack Chains from Cyber Threat Intelligence Reports

Cyber Threat Intelligence CTI reports richly describe real-world attack processes, but their unstructured narratives cannot be directly used for automated attack-path reasoning. Existing CTI extraction methods focus on indicators, entities, or TTP labels without modeling the execution conditions...

Malicious code in @marketfront/infopopup (npm)

The @marketfront/infopopup package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

What the Numbers Say About FIFA 2026 Cyber Risk

The FIFA World Cup 2026 opened on June 11. By that date, according to Check Point Research, the fraud infrastructure targeting it had already been built, staged, and partially deployed. Threat actor activity was pre-planned, months out, across three sectors and at least ten languages. Check Point...

EDB-42392

creationtimestamp| type| source ---|---|--- 2026-06-30 09:23:02+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6889a30d-c929-4ab6-a8d5-6557dad98cf8...

TinyML-Driven Cybersecurity for Autonomous Spacecraft: Latency-Accuracy Analysis for SPARTA RF and Cyber Threat Detection

Autonomous spacecraft require rapid, lightweight, and reliable onboard detection of cyber-RF threats. Using the SPARTA attack model, we analyze the latency-accuracy trade-offs of TinyML-compatible classical models -- Random Forest, Logistic Regression, SVM, and MLP -- for detecting uplink jamming...

GenTI: Benchmarking LLMs for Autonomous IDPS Rule Generation for Unseen Attacks

Rule-based Intrusion Detection and Prevention Systems IDPS offer precise attack detection as well as mitigation, however their manually crafted, signature-driven rules limit adaptability to emerging and zero-day threats. Additionally, existing public datasets e.g., CICIDS2017, UNSW-NB15 focus on...

ZERO-APT: A Closed-Loop Adversarial Framework for LLM-Driven Automated Penetration Testing under Intelligent Defense

LLM-driven automated penetration testing agents are typically evaluated against static targets that neither detect nor respond to attacks, so their behavior under intelligent defense remains untested. The causal consistency of multi-step attack chains likewise hinges on unstable LLM reasoning, an...

TTPrint: Evidence-Grounded TTP Extraction Via Diverge-Then-Converge Verification

Extracting MITRE ATT&CK techniques from cyber threat intelligence CTI reports is an open-set, multi-label problem requiring both high recall not missing techniques and high precision not hallucinating unsupported ones. Existing methods--rule-based, supervised, and LLM-based--struggle to achieve...

How to better protect your growing business in an AI-powered world

AI is rapidly reshaping how work gets done in companies and organizations. In celebrating National Small Business Month, we want to acknowledge the unique challenges that growing business leaders face as AI creates both opportunity and risk. They face constant tradeoffs between moving fast,...

Context-Aware Entity-Relation Extraction for Threat Intelligence Knowledge Graphs

Cybersecurity Knowledge Graphs CKGs unify diverse Cyber Threat Intelligence CTI sources into structured, queryable formats, offering scalable solutions for automating proactive and real-time security responses. Their increasing adoption has significantly enhanced the workflow and decision-making...