@kubikpixel@chaos.social«Das Cybersecurity-Äquivalent zum Hausschlüssel unter der Matte:
#IT-Experten auf Reddit analysieren fatale Lücken in der #Cybersecurity, die für #Hacker so offensichtlich sind wie ein Haustürschlüssel unte…
@danyork@mastodon.socialI will be at #ICANN86 this coming week in Seville, Spain, speaking on a panel about #cybersecurity and #InternetResilience , moderating a session in the
@groupnebula563@mastodon.socialany #cybersecurity people interested in getting into a webserver in order to rescue a dying website?
boosts appreciated :P
#cybersec #infosec
@GroupNebula563@mastodon.socialany #cybersecurity people interested in getting into a webserver in order to rescue a dying website?
boosts appreciated :P
#cybersec #infosec
@deepthoughts10@infosec.exchange @kubikpixel@chaos.socialVibecoding #Malware Fuels a New Wave Of Stealth Attacks
Vibe coding’s dark side, “vibe hacking,” is on the rise. #Cybersecurity companies such as McAfee and Bitdefender have observed recent spikes in vibe-coded malware, also called “
@deepthoughts10@infosec.exchangeRE: #cybersecurity
@adulau@infosec.exchangeIf you are curious about (nearly) everything we did the past months at the GCVE.eu initiative:
#gcve #cve #vulnerability #vulnerabilitymanagement #cra #cybersecurity #openstandard #opensource
@deepthoughts10@infosec.exchangeRE: #cybersecurity
@deepthoughts10@infosec.exchangeHere today at @… and very excited about it!
#cybersecurity
@pixelpusher220@dmv.community @adulau@infosec.exchangeThe GCVE Lab is an open space for experimenting with new ideas, tools, formats, and services related to the Global CVE Allocation System initiative.
The lab allows the GCVE community to explore promising concepts without immediately imposing the stability, compatibility, and operational requirements expected from the core GCVE infrastructure.
Open to comments/ideas.
#gcve #cve #cybersecurity
https://discourse.ossbase.org/t/gcve-lab-proposal/1117
https://gcve.eu
@… @…
@deepthoughts10@infosec.exchangeRE: #cybersecurity
@deepthoughts10@infosec.exchangeThis guy has a nice set of threat hunting blog posts. He includes detection logic and #ioc when available
https://newtonpaul.com
@deepthoughts10@infosec.exchangeRE: #cybersecurity
@deepthoughts10@infosec.exchangeRE: #cybersecurity
@deepthoughts10@infosec.exchangeRE: #cybersecurity
@deepthoughts10@infosec.exchangeRE: #cybersecurity conference.
@adulau@infosec.exchangeMISP Galaxy Threat Actor Explorer v1.0.0 released
#cti #cybersecurity #misp #threatintelligence #threatintel
@…
@deepthoughts10@infosec.exchangeRE: #cybersecurity
@deepthoughts10@infosec.exchangeRE: #cybersecurity
@deepthoughts10@infosec.exchangeRE: #cybersecurity
@adulau@infosec.exchangeRecommendations on Naming Threat Actors.
The MISP standard has been updated including the new tracking of naming origin from security vendor.
#cti #threatintelligence #soc #cybersecurity #threatintel
🔗 https://www.misp-standard.org/rfc/threat-actor-naming.html#name-misp-galaxy-threat-actor-na
@deepthoughts10@infosec.exchangeRE: #cybersecurity
@adulau@infosec.exchangeA standalone, browser-only HTML/JavaScript application for exploring the MISP threat-actor galaxy, UUID-based relationships across every cluster in the MISP Galaxy repository, and shared MISP Galaxy metadata. Graph rendering is performed by Pivotick.
Source code: #misp #cti #threatintelligence #opensource #threatactor #cybersecurity
@adulau@infosec.exchangeSightings have long been a major topic of discussion in the CTI community, particularly in the field of vulnerability management. We have now published a GCVE BCP to standardise the format that has been implemented, tested and used operationally in Vulnerability-Lookup for some time.
Thanks to everyone (Cédric Bonhomme, Éireann Leverett, Andras Iklody, Sami Mokaddem and many more) who participated in discussions and worked on the implementation details of sightings over the past several years. These efforts had a strong focus on practical implementation, while BCP-12 specifically addresses sightings in the context of vulnerability management.
BCP-12 is still a draft open for review, but it already provides a strong foundation for existing implementations.
#cve #cra #gcve #vulnerabilitymanagement #cybersecurity #openstandard
@adulau@infosec.exchangeA new version of the BCP-11 "Community Contribution Fragments for Existing CVE Records" proposal has been published.
#gcve #cve #cybersecurity #vulnerabilitymanagement
@…
