Fix threat regex to allow negative threat