(EC)2: Event-Centric Explainability for Cybersecurity through Multi-Agent LLM Investigations

Security operations centers rely on anomaly detection systems to flag suspicious events. Feature-level explanations for anomaly detectors offer limited value for operational investigations. To effectively handle alerts, analysts need to know contextual relationships and need actionable...

CVE-2025-54412

creationtimestamp| type| source ---|---|--- 2025-07-25 16:58:06+00:00| published-proof-of-concept| https://github.com/skops-dev/skops/security/advisories/GHSA-m7f4-hrc6-fwg3 2025-07-27 02:27:52+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3luvzpzsgxn2k...

Valkyrie: a Response Framework to Augment Runtime Detection of Time-Progressive Attacks

A popular approach to detect cyberattacks is to monitor systems in real-time to identify malicious activities as they occur. While these solutions aim to detect threats early, minimizing damage, they suffer from a significant challenge due to the presence of false positives. False positives have ...