{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:IB6QJ432Y4V62QGTIH3JPTPYWX","short_pith_number":"pith:IB6QJ432","canonical_record":{"source":{"id":"2509.23573","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-28T02:08:27Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8f3aaa6934238e6e03718dce7483a30d17cba3fc50aec20870647db718bb332a","abstract_canon_sha256":"32a7b373fb9fdc3e8d1d4b7ea965d3865a39c10837e70c84b20bb3610e88d78c"},"schema_version":"1.0"},"canonical_sha256":"407d04f37ac72bed40d341f697cdf8b5c70229476313ccd2d4587d9fe004101d","source":{"kind":"arxiv","id":"2509.23573","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.23573","created_at":"2026-05-26T01:02:27Z"},{"alias_kind":"arxiv_version","alias_value":"2509.23573v4","created_at":"2026-05-26T01:02:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.23573","created_at":"2026-05-26T01:02:27Z"},{"alias_kind":"pith_short_12","alias_value":"IB6QJ432Y4V6","created_at":"2026-05-26T01:02:27Z"},{"alias_kind":"pith_short_16","alias_value":"IB6QJ432Y4V62QGT","created_at":"2026-05-26T01:02:27Z"},{"alias_kind":"pith_short_8","alias_value":"IB6QJ432","created_at":"2026-05-26T01:02:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:IB6QJ432Y4V62QGTIH3JPTPYWX","target":"record","payload":{"canonical_record":{"source":{"id":"2509.23573","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-28T02:08:27Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8f3aaa6934238e6e03718dce7483a30d17cba3fc50aec20870647db718bb332a","abstract_canon_sha256":"32a7b373fb9fdc3e8d1d4b7ea965d3865a39c10837e70c84b20bb3610e88d78c"},"schema_version":"1.0"},"canonical_sha256":"407d04f37ac72bed40d341f697cdf8b5c70229476313ccd2d4587d9fe004101d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-26T01:02:27.934437Z","signature_b64":"34nKwGYv6VahebKRizH/6OVGN3mCOvsBChXMdcW27zwrUCEOcuktWoxj/1qhMYz9lLdT2akwYthw0uS27nb5Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"407d04f37ac72bed40d341f697cdf8b5c70229476313ccd2d4587d9fe004101d","last_reissued_at":"2026-05-26T01:02:27.933688Z","signature_status":"signed_v1","first_computed_at":"2026-05-26T01:02:27.933688Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.23573","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-26T01:02:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pDSpV1kBt0PhJuIBQ8joS8onwMC3BYI2/VShLlaaxlh3y4wofzGD64OlRP+T27ELoCrShBaqNZoGA/VouruOCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-27T05:56:49.096461Z"},"content_sha256":"4341019070dd1dd7520be00f2b88f44f26ba182943384c1d956a581c4569fc17","schema_version":"1.0","event_id":"sha256:4341019070dd1dd7520be00f2b88f44f26ba182943384c1d956a581c4569fc17"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:IB6QJ432Y4V62QGTIH3JPTPYWX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Uncovering Vulnerabilities of LLM-Assisted Cyber Threat Intelligence","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Feiyang Yu, Guanhua Yan, Jinyuan Jia, Luoxi Tang, Ping Yang, Yuqiao Meng, Zhaohan Xi","submitted_at":"2025-09-28T02:08:27Z","abstract_excerpt":"Large language models (LLMs) are increasingly used to help security analysts manage the surge of cyber threats, automating tasks from vulnerability assessment to incident response. Yet in operational CTI workflows, reliability gaps remain substantial. Existing explanations often point to generic model issues (e.g., hallucination), but we argue the dominant bottleneck is the threat landscape itself: CTI is heterogeneous, volatile, and fragmented. Under these conditions, evidence is intertwined, crowdsourced, and temporally unstable, which are properties that standard LLM-based studies rarely ca"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.23573","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.23573/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-26T01:02:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QX9B6InyqawhntxLVMyZ04kXGMDJTV/kBLKDn0fXNDspAcVavR/FKv+ctSdhz8WmGrgK2RZGFzgLFmYaMuLYCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-27T05:56:49.097165Z"},"content_sha256":"8c4ebd4e699767036d4420c28ad3cda93dce200161c7a1625ea4654653b2e2f5","schema_version":"1.0","event_id":"sha256:8c4ebd4e699767036d4420c28ad3cda93dce200161c7a1625ea4654653b2e2f5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IB6QJ432Y4V62QGTIH3JPTPYWX/bundle.json","state_url":"https://pith.science/pith/IB6QJ432Y4V62QGTIH3JPTPYWX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IB6QJ432Y4V62QGTIH3JPTPYWX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-27T05:56:49Z","links":{"resolver":"https://pith.science/pith/IB6QJ432Y4V62QGTIH3JPTPYWX","bundle":"https://pith.science/pith/IB6QJ432Y4V62QGTIH3JPTPYWX/bundle.json","state":"https://pith.science/pith/IB6QJ432Y4V62QGTIH3JPTPYWX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IB6QJ432Y4V62QGTIH3JPTPYWX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:IB6QJ432Y4V62QGTIH3JPTPYWX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"32a7b373fb9fdc3e8d1d4b7ea965d3865a39c10837e70c84b20bb3610e88d78c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-28T02:08:27Z","title_canon_sha256":"8f3aaa6934238e6e03718dce7483a30d17cba3fc50aec20870647db718bb332a"},"schema_version":"1.0","source":{"id":"2509.23573","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.23573","created_at":"2026-05-26T01:02:27Z"},{"alias_kind":"arxiv_version","alias_value":"2509.23573v4","created_at":"2026-05-26T01:02:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.23573","created_at":"2026-05-26T01:02:27Z"},{"alias_kind":"pith_short_12","alias_value":"IB6QJ432Y4V6","created_at":"2026-05-26T01:02:27Z"},{"alias_kind":"pith_short_16","alias_value":"IB6QJ432Y4V62QGT","created_at":"2026-05-26T01:02:27Z"},{"alias_kind":"pith_short_8","alias_value":"IB6QJ432","created_at":"2026-05-26T01:02:27Z"}],"graph_snapshots":[{"event_id":"sha256:8c4ebd4e699767036d4420c28ad3cda93dce200161c7a1625ea4654653b2e2f5","target":"graph","created_at":"2026-05-26T01:02:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.23573/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) are increasingly used to help security analysts manage the surge of cyber threats, automating tasks from vulnerability assessment to incident response. Yet in operational CTI workflows, reliability gaps remain substantial. Existing explanations often point to generic model issues (e.g., hallucination), but we argue the dominant bottleneck is the threat landscape itself: CTI is heterogeneous, volatile, and fragmented. Under these conditions, evidence is intertwined, crowdsourced, and temporally unstable, which are properties that standard LLM-based studies rarely ca","authors_text":"Feiyang Yu, Guanhua Yan, Jinyuan Jia, Luoxi Tang, Ping Yang, Yuqiao Meng, Zhaohan Xi","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-28T02:08:27Z","title":"Uncovering Vulnerabilities of LLM-Assisted Cyber Threat Intelligence"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.23573","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4341019070dd1dd7520be00f2b88f44f26ba182943384c1d956a581c4569fc17","target":"record","created_at":"2026-05-26T01:02:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"32a7b373fb9fdc3e8d1d4b7ea965d3865a39c10837e70c84b20bb3610e88d78c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-28T02:08:27Z","title_canon_sha256":"8f3aaa6934238e6e03718dce7483a30d17cba3fc50aec20870647db718bb332a"},"schema_version":"1.0","source":{"id":"2509.23573","kind":"arxiv","version":4}},"canonical_sha256":"407d04f37ac72bed40d341f697cdf8b5c70229476313ccd2d4587d9fe004101d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"407d04f37ac72bed40d341f697cdf8b5c70229476313ccd2d4587d9fe004101d","first_computed_at":"2026-05-26T01:02:27.933688Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-26T01:02:27.933688Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"34nKwGYv6VahebKRizH/6OVGN3mCOvsBChXMdcW27zwrUCEOcuktWoxj/1qhMYz9lLdT2akwYthw0uS27nb5Dw==","signature_status":"signed_v1","signed_at":"2026-05-26T01:02:27.934437Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.23573","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4341019070dd1dd7520be00f2b88f44f26ba182943384c1d956a581c4569fc17","sha256:8c4ebd4e699767036d4420c28ad3cda93dce200161c7a1625ea4654653b2e2f5"],"state_sha256":"a7404653a27b506a0ee6fd4d0c0c6b7190f311da1555674fc14c89dcb9f9ce5b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H6EJG0lUKwG2I3WyuzOqtIyeOpPsEc5FuO7R99C1/A62h/f9PwotOsES97JdPEbWEwbylxwKaG6QaZkeg7QQAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-27T05:56:49.100761Z","bundle_sha256":"9f75a4af644a9d83fefd3bb9ea476bf9d098041a8fa5a3fc04d8a82608e21bbe"}}