Abstract: Predicting and using threat levels for cyber threats using data from public data sources can include obtaining cyber vulnerability and threat data (“threat data”) from publicly available data sources including a social networking service, the threat data including social networking messages. A threat that is predicted to exploit a vulnerability can be determined based on the threat data. Filtered threat data that includes social networking messages that mention the threat can be stored. A threat assessment service can analyze the filtered threat data to determine a mention trend for the threat, a severity score for the threat, an exploitation history for the threat, and a patch availability for rectifying the threat. Based on the mention trend, the severity score, the exploitation history, and the patch availability, a predicted threat level for the threat can be used to generate an alert, which can be sent to a subscriber device.

Abstract: Aspects of the subject disclosure may include, for example, obtaining data that identifies network traffic associated with a threat actor, responsive to the obtaining the data, performing feature extraction on the data, resulting in extracted features, classifying the network traffic based on the extracted features, detecting, in accordance with the classifying the network traffic, an action change in the network traffic, resulting in a detected action change, predicting a future traffic profile for the threat actor based on the detected action change, and responsive to the predicting the future traffic profile, generating an alert regarding the future traffic profile, thereby enabling mitigation of a security risk associated with the threat actor. Other embodiments are disclosed.