Tootfinder

Opt-in global Mastodon full text search. Join the index!

@adulau@infosec.exchange
2026-02-20 10:40:39

The GCVE.eu initiative will take part in hackathon.lu (14–15 April, Luxembourg), alongside core developers of GCVE-related projects. See you there to build, experiment, and collaborate!
#gcve #cve #opensource

GCVE federated model
@adulau@infosec.exchange
2025-12-06 16:10:40

We’ve updated the draft GCVE BCP-05 standard to introduce flexible record types, making it easier to extend, enrich, and structure security advisories.
Comments are more than welcome!
#gcve #cve #vulnerability

@adulau@infosec.exchange
2026-02-04 21:53:40

GCVE will be at hackathon.lu - April 14th and 15th, 2026
So if you want to work on all the cool stuff around vulnerability management, federated publication of vulnerability information, analytics, and anything related to vulnerabilities, join us.
#gcve #opensource

@adulau@infosec.exchange
2026-02-07 08:07:19

Following a great question from CERT.PL about GCVE KEV assertion format and especially about the confidence level for an evidence of a vulnerability assertion.
We made a first table of confidence level for the evidence in the KEV record format.
#kev #gcve

| Confidence | Label            | Meaning (confidence in this evidence item) | Typical exploitation evidence examples |
|-----------:|------------------|---------------------------------------------|----------------------------------------|
| 0.0        | None             | No usable evidence or placeholder only      | Empty claim; unresolved rumor with no traceability |
| 0.1        | Extremely low    | U…