2026-04-09T15:48:53Z https://yabu.me Alexandre Dulaunoy https://yabu.me/npub1xanpgt7tl8scvww672puu3pt2ez0v6fz8ms3tatgzu638pc000jqsa9q9d https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/295/362/026/663/569/original/0ef3f34cedf9edaa.jpeg https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/295/362/026/663/569/original/0ef3f34cedf9edaa.jpeg https://yabu.me/nevent1qqsx4t6r3dswl97g599th92u33zxnftq4gl2jajjk8yqp0xa4tzcmzgzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gw59cju FSL and BSL belong on any list of false-promise licenses:&lt;li&gt;&lt;a href=&#34;<a href="https://fsl.software/&#34">https://fsl.software/&#34</a>; target=&#34;_blank&#34; rel=&#34;nofollow noopener&#34; translate=&#34;no&#34;&gt;&lt;span class=&#34;invisible&#34;&gt;<a href="https://&lt;/span&gt;&lt;span">https://&lt;/span&gt;&lt;span</a> class=&#34;&#34;&gt;fsl.software/&lt;/span&gt;&lt;span class=&#34;invisible&#34;&gt;&lt;/span&gt;&lt;/a&gt;&lt;/li&gt;&lt;li&gt;&lt;a href=&#34;<a href="https://mariadb.com/bsl-faq-adopting/#whatis&#34">https://mariadb.com/bsl-faq-adopting/#whatis&#34</a>; target=&#34;_blank&#34; rel=&#34;nofollow noopener&#34; translate=&#34;no&#34;&gt;&lt;span class=&#34;invisible&#34;&gt;<a href="https://&lt;/span&gt;&lt;span">https://&lt;/span&gt;&lt;span</a> class=&#34;ellipsis&#34;&gt;mariadb.com/bsl-faq-adopting/#&lt;/span&gt;&lt;span class=&#34;invisible&#34;&gt;whatis&lt;/span&gt;&lt;/a&gt;&lt;/li&gt;<br/><br/>They are **not open source**. They are restrictive source-available licenses dressed up with “open” language.<br/><br/>Reading the code is not enough. If users cannot freely run, use, or build on the software because of field-of-use or competition restrictions, the software is not open source.<br/><br/>Marketing it as “open source” or even putting “open” in your name is misleading twice: first in the license, then in the messaging.<br/><br/>#opensource #fauxopensource #license 2026-04-10T04:38:05Z https://yabu.me/nevent1qqsqlkynkg6kj9nrsn877p8xdlfjpj4plj8wa4xf0h6xukk8v5fal6szyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gsy3u97 If someone comes to me today preaching about “post-quantum” security issues, I’ll remind them of the current state of security: the npm ecosystem gets abused daily, CI pipelines run left and right with full access to cloud services, so-called security devices like F5 and Ivanti are exposed (and compromised) to the internet, mailboxes get compromised just to change an IBAN in a PDF, and a simple phone call is still enough to get someone to hand over an MFA code.<br/><br/>But yes, by all means, let’s focus on post-quantum threats while handing AI tools SSH access like it’s a feature, not a confession.<br/><br/>#cybersecurity #stateoftheworld<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/322/174/707/797/506/original/b2c8beec36c42e77.png"> <br/> 2026-03-31T05:41:10Z https://yabu.me/nevent1qqsdttycmurg7cmu4qj97ya0hhpa7rw6w43vzr0veyy6vneerrn6jkgzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gr9xcfv In reply to <a href='/nevent1qqsdhyqgvze46sxr5jf34fthkzw828w0mwxfq827y7pyka37vx22lqqls52pw'>nevent1q…52pw</a><br/>_________________________<br/><br/>In the same level of discussions, &#34;Discord Alternatives, Ranked&#34; is an interesting read too.<br/><br/>🔗 <a href="https://taggart-tech.com/discord-alternatives/">https://taggart-tech.com/discord-alternatives/</a> 2026-02-10T11:27:17Z https://yabu.me/nevent1qqsdhyqgvze46sxr5jf34fthkzw828w0mwxfq827y7pyka37vx22lqqzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7g9gv2kd I hate Discord. The platform is proprietary, the U/X is just completely confusing and it&#39;s difficult to find anything. <br/><br/>If you run a project, I love <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1shflyr3kdel32z4rc3ssv4a2rg3uhq9nvq2e9m632jgyg7h03ycq427zml" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Discourse</span> (<span class="italic">npub1shf…7zml</span>)</a></span> - it&#39;s open source, the U/X is great and you can archive everything in markdown (and much more).<br/><br/><a href="https://github.com/discourse/discourse">https://github.com/discourse/discourse</a><br/>and we run it for GCVE <a href="https://discourse.ossbase.org/c/gcve/14">https://discourse.ossbase.org/c/gcve/14</a> <br/><br/>#opensource #discourse 2026-02-10T07:18:15Z https://yabu.me/nevent1qqsrl6l6vnjzc7ngap6ywzaqaa253853qzdacefrx2m9lakez9rtwzszyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7g4dldrh In reply to <a href='/nevent1qqs9y66xhh9w2gstyvleepg6zu0dgknp2g6uw4q3yvsn2rc0p8dxa9sx27k5z'>nevent1q…7k5z</a><br/>_________________________<br/><br/>The federation is open. Any matrix server or bridge is allowed. 2026-02-09T16:01:17Z https://yabu.me/nevent1qqsvzzfzn92qepwsatd2pe7dqt8khu287rxcujufgpjc37cu2ucqmmszyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7g4us2xz In reply to <a href='/nevent1qqsr04s3dm5np7hkullql458je59jun2pkyrqekmcvwgw4m4eln6pyst2emfn'>nevent1q…emfn</a><br/>_________________________<br/><br/>You need to have an account on another public matrix server like matrix.org to join the public room. We don’t allow account creation on our server. 2026-02-06T21:11:03Z https://yabu.me/nevent1qqsw4jjau6929duzw03ua0q224277cg46u855lv58p89usduun27yvgzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7g2jdg9j We’ve just set up a Matrix channel for Vulnerability-Lookup and GCVE discussions.<br/><br/>Matrix public room: #vulnerability-lookup-public:matrix.circl.lu<br/><br/>This space is intended for informal discussions. For standard and more detailed discussions, we recommend using:<br/><br/>🔗 vulnerability-lookup discourse <a href="https://discourse.ossbase.org/c/vulnerability-lookup/6">https://discourse.ossbase.org/c/vulnerability-lookup/6</a><br/><br/>🔗 GCVE discourse <a href="https://discourse.ossbase.org/c/gcve/14">https://discourse.ossbase.org/c/gcve/14</a><br/><br/>#gcve #vulnerabilitymanagement #opensource #cve #matrix <br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1pnarjrczen0087w26a9axw3jhq9wxh5cn073k0s2pjem0ura2yqqhl2y52" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>gcve.eu</span> (<span class="italic">npub1pna…2y52</span>)</a></span> <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub143xwtzhj6xhcxkhxzjj62cs6rs0fl7q4ufuuypcmec2xhnm4cpvqm2w0tp" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>circl</span> (<span class="italic">npub143x…w0tp</span>)</a></span> 2026-02-06T13:08:17Z https://yabu.me/nevent1qqszjz42zlaxn9g20ntk9wdwwk52xrcptqstxkd63gc0xkywl43u7sgzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7g5dm9r0 In reply to <a href='/nevent1qqsql3ww8jl0mxkg48tz3n9cf0e3sufhqnh2ygx2e689x934z464h6cnkdzjx'>nevent1q…dzjx</a><br/>_________________________<br/><br/>Iperlane Security ? 2026-02-01T18:03:25Z https://yabu.me/nevent1qqsfz88ymvy75rnw4t8u8lu57nys7rmeje2scudwgd4anydzsrkhkzczyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gs68475 French government always talks about technological sovereignty…<br/><br/><a href="https://www.lemonde.fr/en/france/article/2025/12/15/us-tech-firm-palantir-extends-deal-with-french-intelligence-agency_6748523_7.html">https://www.lemonde.fr/en/france/article/2025/12/15/us-tech-firm-palantir-extends-deal-with-french-intelligence-agency_6748523_7.html</a><br/><br/>#palantir #french #sovereignty<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/735/888/485/402/567/original/c60344041442b80d.jpeg"> <br/> 2025-12-17T16:41:09Z https://yabu.me/nevent1qqsydkgl3ud2ssalhxfkw5xxlv9tv8727k9akead3puqhj3w49lzl6qzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7g799yyh Why it matters to create and maintain open-source infrastructure for security monitoring including collection of forums and malicious communication channels.<br/><br/>This is a strong example (Google dark web report is discontinued) of the risks of relying solely on commercial vendors. If a capability does not align with their business interests or generate sufficient revenue, it can be discontinued at any time. Open-source infrastructure helps ensure continuity, transparency, and long-term access to critical monitoring capabilities that are essential for the security community.<br/><br/>If you want to run your own &#34;darkweb&#34; monitoring, we develop open source tooling supporting such monitoring&lt;li&gt;&lt;a href=&#34;<a href="https://www.ail-project.org/&#34">https://www.ail-project.org/&#34</a>; target=&#34;_blank&#34; rel=&#34;nofollow noopener&#34; translate=&#34;no&#34;&gt;&lt;span class=&#34;invisible&#34;&gt;<a href="https://www.&lt;/span&gt;&lt;span">https://www.&lt;/span&gt;&lt;span</a> class=&#34;&#34;&gt;ail-project.org/&lt;/span&gt;&lt;span class=&#34;invisible&#34;&gt;&lt;/span&gt;&lt;/a&gt; &lt;span class=&#34;h-card&#34; translate=&#34;no&#34;&gt;&lt;a href=&#34;<a href="https://infosec.exchange/@ail_project&#34">https://infosec.exchange/@ail_project&#34</a>; class=&#34;u-url mention&#34;&gt;@&lt;span&gt;ail_project&lt;/span&gt;&lt;/a&gt;&lt;/span&gt; &lt;/li&gt;&lt;li&gt;&lt;a href=&#34;<a href="https://github.com/ail-project&#34">https://github.com/ail-project&#34</a>; target=&#34;_blank&#34; rel=&#34;nofollow noopener&#34; translate=&#34;no&#34;&gt;&lt;span class=&#34;invisible&#34;&gt;<a href="https://&lt;/span&gt;&lt;span">https://&lt;/span&gt;&lt;span</a> class=&#34;&#34;&gt;github.com/ail-project&lt;/span&gt;&lt;span class=&#34;invisible&#34;&gt;&lt;/span&gt;&lt;/a&gt;&lt;/li&gt;<br/><br/>#darkweb #opensource #osint #cybersecurity <br/><br/>🔗 <a href="https://support.google.com/websearch/answer/16767242?hl=en&amp;ref_topic=7028834&amp;co=GENIE.Platform%3DiOS">https://support.google.com/websearch/answer/16767242?hl=en&amp;ref_topic=7028834&amp;co=GENIE.Platform%3DiOS</a> 2025-12-17T12:09:00Z https://yabu.me/nevent1qqsrgdwkqsyy4ut4cv363z7w5d8lerv4w7gxnpv2gct69rtcywyg0dczyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gwvqw9g In reply to <a href='/nevent1qqsf2rsm2uvdvfek0e5968rsell832pc2hnd42zv3e2yjsyzs2pjpwgy084jm'>nevent1q…84jm</a><br/>_________________________<br/><br/>Can you share the indicators? we can give you an access to a <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1mlypv5xgnd6zxu8ssyzc485ussa5a0mwf3g4t6sz2jtgts2qsuqq6arl2t" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>MISP</span> (<span class="italic">npub1mly…rl2t</span>)</a></span> community if needed 2025-11-04T14:11:40Z https://yabu.me/nevent1qqsrxuu252wrehc34k8n6k7yw33q8qx8yn4ddrqvxtqv50lt9drs6xszyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7g7flr9e I think the best summary until now about Post-quantum cryptography is from Peter Gutmann in the cryptography mailing-list.&lt;code&gt;Given that after 20 years and hundreds of millions of dollars spent researchers have yet to demonstrate a single legitimate cryptanalysis result using a quantum physics experiment, it&#39;s a bit like arguing over which brand of unicorn repellent is the most cromulent.&lt;br&gt;&lt;br&gt;The current state of things in terms of pure vs. hybrid systems seems to be:&lt;br&gt;&lt;br&gt;- Governments = Pure: “We’re putting all our eggs in one basket and hoping that the dial stops spinning at ‘not broken’”&lt;br&gt;&lt;br&gt;- Everyone else = Hybrid: “We trust this new stuff so little that we’re requiring you use the crypto that we claim is broken alongside it”&lt;br&gt;&lt;br&gt;Peter.&lt;br&gt;&lt;/code&gt;<br/><br/>#cryptography #pq #postquantum #postquantumcryptography <br/><br/><a href="https://www.metzdowd.com/pipermail/cryptography/2025-October/039129.html">https://www.metzdowd.com/pipermail/cryptography/2025-October/039129.html</a><br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/484/165/861/731/308/original/37fde305bc3b500f.png"> <br/> 2025-11-03T05:46:21Z https://yabu.me/nevent1qqs93p60u7xhlru5s2ezpesmx5xcr5vgwc6zluzc8srqxpjnf9pu3yczyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gfdyd4h In reply to <a href='/nevent1qqswthsvjmvevehyh83uuyvfy8fetmw67qmm3g6c4w2f2qsqmml9rdgnacwre'>nevent1q…cwre</a><br/>_________________________<br/><br/>I’m just wondering are you sure of the test? I remember we got trapped in an ASA scanning script which was expecting an HTTP 200 while the patch gives a redirect but this was also a 200. 2025-10-28T11:54:49Z https://yabu.me/nevent1qqsfjrxvlzs7dmgggz22atnztjhjg3qwh3w5rw4e6f2vnr2l7hjp0nczyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7ga7kjj5 Imagine working in your country’s cybersecurity center or CERT, and suddenly being reassigned to border control and deportation duties. Something is clearly broken and dangerously so.<br/><br/>What will you do as a cybersecurity professional?<br/><br/>#us #cybersecurity #dhs #cisa <br/><br/><a href="https://techcrunch.com/2025/10/10/homeland-security-reassigns-hundreds-of-cisa-cyber-staffers-to-support-trumps-deportation-crackdown/">https://techcrunch.com/2025/10/10/homeland-security-reassigns-hundreds-of-cisa-cyber-staffers-to-support-trumps-deportation-crackdown/</a> 2025-10-11T06:32:08Z https://yabu.me/nevent1qqs8k5txv9eu67v9cxcnr8qj84hxu2vrwg7c70wj86qcz2fpwlazqnszyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gy7f6j6 Finally a useful magic quadrant<br/><br/>Thanks to <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1udn9dsz5hxu4akxgjk7q8ax3g6jmujaamarukkxt096mjxt8vaqsnl3tjr" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Wendy Nather</span> (<span class="italic">npub1udn…3tjr</span>)</a></span> for the discovery.<br/><br/>#cybersecurity #vulnerability<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/008/670/175/980/149/original/6909f753c4ce0b8c.png"> <br/> 2025-08-11T06:20:08Z https://yabu.me/nevent1qqsgq5c8awtwmnp3ljsy6f06kv86wfkr7ykf36g48pa20yzkkt3d63qzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7ge747x9 When I added the threat-actor <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1mlypv5xgnd6zxu8ssyzc485ussa5a0mwf3g4t6sz2jtgts2qsuqq6arl2t" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>MISP</span> (<span class="italic">npub1mly…rl2t</span>)</a></span> galaxy type on Mar 4, 2016, I didn’t expect that, years later, vendors would still invent new names for already known threat actors, avoid using UUIDs, reuse similar names for different actors, and create confusing names by mixing tools or software used by the actors.<br/><br/>That’s why we continue the tedious work of maintaining a proper threat-actor database, with relationships to other galaxies such as MITRE ATT&amp;CK, Malpedia, and more.<br/><br/>After years of this monastic effort, we’re seeing the benefits—many open-source and proprietary tools now rely on the MISP galaxy, which serves as both an open standard and a public knowledge base.<br/><br/>We also maintain a dedicated website for all MISP galaxies. Here’s an example from the threat-actor database:<br/><a href="https://www.misp-galaxy.org/threat-actor/relations/fa80877c-f509-4daf-8b62-20aba1635f68/">https://www.misp-galaxy.org/threat-actor/relations/fa80877c-f509-4daf-8b62-20aba1635f68/</a><br/><br/>:github: Repository <a href="https://github.com/MISP/misp-galaxy/">https://github.com/MISP/misp-galaxy/</a><br/>🌐 Public website <a href="https://www.misp-galaxy.org/threat-actor/">https://www.misp-galaxy.org/threat-actor/</a><br/><br/>If you’d like to become a monk (just kidding!) and contribute, feel free to open an issue or submit a pull request on the misp-galaxy repo.<br/><br/>In MISP, you can directly benefit from all the galaxies, and you also have advanced functionalities like forking and maintaining an up-to-date private version of the threat-actor database.<br/><br/>#threatintel #threatintelligence #opensource #tip #cti #misp<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/952/712/373/425/103/original/999229c7f8449349.png"> <br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/952/712/316/970/288/original/0928ff88ed5595a2.png"> <br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/952/733/039/839/174/original/eb4687037f0d17bb.png"> <br/> 2025-08-01T09:14:32Z https://yabu.me/nevent1qqsdc3nawkrpr6a7mw55w3l2w2ssyjuw3w7cyegdqxpra5wv2wwmpvgzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gkx784k « Cloudflare 1.1.1.1 Incident on July 14, 2025 »<br/><br/>Perhaps it’s time to return to DNS’s original distributed design.<br/><br/>#dns #distributed #cloudflare <br/><br/><a href="https://blog.cloudflare.com/cloudflare-1-1-1-1-incident-on-july-14-2025/">https://blog.cloudflare.com/cloudflare-1-1-1-1-incident-on-july-14-2025/</a> 2025-07-16T05:27:24Z https://yabu.me/nevent1qqs8v0k8xx84rk6jfdgf9w9p43ndt64n8puy9sg3ppjztrgkquyy9eqzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gdtq66v Something that’s been bothering me for years in the security world: why do researchers demand bug bounties for vulnerabilities in open source projects, when the very contributors maintaining and fixing those issues get nothing, just goodwill?<br/><br/>It feels deeply unfair. The burden falls on unpaid maintainers, yet bounty hunters get rewarded. If you want a paid bounty, maybe help fund the people who actually fix the mess too.<br/><br/>#opensource #security #bugbounty 2025-06-17T19:46:46Z https://yabu.me/nevent1qqsggf6hawa3qn6xhwj0x2nkas0lmww6fkw7y95404srqknkypgkv0gzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gf7x24m Just a reminder: Vulnerability Lookup isn’t just about finding CVEs. It supports the full chain, collection from multiple sources, continuous distribution, and allocation within a coordinated vulnerability disclosure (CVD) process. 100% open source.<br/><br/>🔗 An online version maintained by <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub143xwtzhj6xhcxkhxzjj62cs6rs0fl7q4ufuuypcmec2xhnm4cpvqm2w0tp" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>circl</span> (<span class="italic">npub143x…w0tp</span>)</a></span> <a href="https://vulnerability.circl.lu/">https://vulnerability.circl.lu/</a><br/><br/>🔗 <a href="https://www.vulnerability-lookup.org/">https://www.vulnerability-lookup.org/</a> <br/><br/>🔗 <a href="https://github.com/vulnerability-lookup/vulnerability-lookup">https://github.com/vulnerability-lookup/vulnerability-lookup</a><br/><br/>#opensource #cve #vulnerability #cna #cvd #cybersecurity 2025-04-15T19:45:12Z https://yabu.me/nevent1qqsfqdnqnz9r73fpkny6dnygphyfj03g55c6mfyum8uve368uffk35czyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7g6s9ypk If you want to join an open source #hackathon for open source security tools, it’s next week (on April 8th and 9th, 2025) in Luxembourg.<br/><br/><a href="https://hackathon.lu">https://hackathon.lu</a><br/><br/>#opensource #infosec #cybersecurity<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/286/793/736/838/662/original/9d5a38a7d5817b1c.jpeg"> <br/> 2025-04-05T18:37:39Z https://yabu.me/nevent1qqs8d0ru2jjx7gcqt3059mqmq0d0cpdr93q4u2j7dm7u325wvfjevegzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7g07aqut We are excited to announce that CIRCL has three open positions available.<br/><br/>As a team strongly oriented towards open-source development, we value contributions that drive innovation and strengthen the cybersecurity community. These roles are open to EU citizens, with the workplace based in Luxembourg. If you’re passionate about cybersecurity and open-source collaboration, we encourage you to apply and make a meaningful impact.&lt;li&gt;CIRCL - Software Engineer and Intelligence Analyst (software-engineering-analyst) &lt;/li&gt;<br/><br/>🔗 <a href="https://www.circl.lu/projects/position/software-engineering-analyst/&lt;li&gt;CIRCL">https://www.circl.lu/projects/position/software-engineering-analyst/&lt;li&gt;CIRCL</a> - Security Analyst and Researcher (Security-Analyst-and-Researcher)&lt;/li&gt;<br/><br/>🔗 <a href="https://www.circl.lu/projects/position/security-analyst-researcher/&lt;li&gt;CIRCL">https://www.circl.lu/projects/position/security-analyst-researcher/&lt;li&gt;CIRCL</a> - Incident and Vulnerability Disclosure Coordinator/Analyst (nis2-incident-analyst)&lt;/li&gt;<br/><br/>🔗 <a href="https://www.circl.lu/projects/position/nis2-incident-analyst/">https://www.circl.lu/projects/position/nis2-incident-analyst/</a><br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub143xwtzhj6xhcxkhxzjj62cs6rs0fl7q4ufuuypcmec2xhnm4cpvqm2w0tp" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>circl</span> (<span class="italic">npub143x…w0tp</span>)</a></span> <br/><br/>#cybersecurity #opensource #europe #csirt #cert #nis2 2025-03-12T10:05:18Z https://yabu.me/nevent1qqsfefqmwnzuyvlavvzgtqxqrwq36pek9a64uvnfznwtm6qr2yj2scqzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gj23lu8 I find this vulnerability hilarious<br/><br/>« The GDPR Cookie Compliance – Cookie Banner, Cookie Consent, Cookie Notice – CCPA, DSGVO, RGPD plugin for WordPress is vulnerable to Stored Cross-Site Scripting »<br/><br/>Often, websites only use cookies necessary for normal operation and don’t require explicit user consent. However, some legal teams insist on having it “to be on the safe side.” Now it’s very safe indeed. ;-)<br/><br/>This particular vulnerability isn’t a big deal since it requires admin rights on WordPress to inject. If you’re already an admin, you can do worse things. The only advantage for attackers is that the injection spreads everywhere.<br/><br/>#infosec #gdpr #cybersecurity #vulnerability #wordpress <br/><br/>🔗 <a href="https://vulnerability.circl.lu/vuln/CVE-2025-2205">https://vulnerability.circl.lu/vuln/CVE-2025-2205</a> 2025-03-12T06:26:28Z https://yabu.me/nevent1qqsf72qxmqrvc0wwfx79asj4h0mjs6ds39ym7rhld7vr3jxh803s9gszyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gafpp54 In reply to <a href='/nevent1qqswsech2zam5333scyxuvkqnsfg9g6sm6fmw8l8zs8rr7d2lu3s3hs70qhl7'>nevent1q…qhl7</a><br/>_________________________<br/><br/>The « bias » one is hilarious. So many reports, manuals, and memos mention the word. From Europe, it just looks like ignorance is tearing everything down, like a massive autodafé. 2025-02-10T17:44:09Z https://yabu.me/nevent1qqsqlyx88mg86ns2hem78dwf2yfsx9uqwt56gcgqm4a28glkuddj87qzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7g9vy6l2 In reply to <a href='/nevent1qqsqvrjx3ag78eqdwhjdjx4xq2ng7lt5w0lgwc649h8ckg78yy7hkeg7n2f5x'>nevent1q…2f5x</a><br/>_________________________<br/><br/>We developed the open source vulnerability-lookup project (and also the sighting part) for providing actionable intelligence in the scope of NIS2 obligation and to share the information with all CSIRTs and SOCs efficiently. <br/><br/><a href="https://www.vulnerability-lookup.org/">https://www.vulnerability-lookup.org/</a><br/><br/>about the sighting aspect <a href="https://www.vulnerability-lookup.org/tools/#sightings">https://www.vulnerability-lookup.org/tools/#sightings</a><br/><br/>We have still plenty of ideas. If you see something missing, let us know.<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1lcc6wn885u6k395x5j5tmdm94r6dh9zajxm8gyk82pv2s2j3el7sc6lcye" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Kevin Beaumont</span> (<span class="italic">npub1lcc…lcye</span>)</a></span> <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub14g0mj0fmn0sepfuhp2wupyk7d8xyz7rezpmrx2gfsav9vxlwxypq4xznd6" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Not Simon 🐐</span> (<span class="italic">npub14g0…znd6</span>)</a></span> 2024-12-18T17:37:38Z https://yabu.me/nevent1qqswum76r99gycjd9lwdv9dfq5hu6n7hegnre4dh8cqha70swl88uxszyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gs77wyg In reply to <a href='/nevent1qqswjdye4l3684ypklsxsg2eucn5tx4pduahavxypaus0lfhn9dqm9qcxxkvm'>nevent1q…xkvm</a><br/>_________________________<br/><br/>If you are curious about the evolution of sightings <a href="https://vulnerability.circl.lu/vuln/CVE-2023-34990#sightings">https://vulnerability.circl.lu/vuln/CVE-2023-34990#sightings</a> 2024-12-18T17:05:39Z https://yabu.me/nevent1qqsykjjqk5rv9vjlxfeehyyjhdw83fjzvheqddjvrmtt7lqwy50gsvqzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gwc2n7w If you are wondering about the unpublished CVE-2024-49848... there is a PoC.<br/><br/>#vulnerability <br/><br/>🔗 <a href="https://vulnerability.circl.lu/comment/23fd524b-475e-4b9f-8dc2-7b67f4cec409">https://vulnerability.circl.lu/comment/23fd524b-475e-4b9f-8dc2-7b67f4cec409</a> 2024-12-18T15:00:08Z https://yabu.me/nevent1qqs94cqee3amrk6pzvntu8usn48x6g9n94m4rv26kwdqjryg4mc6kggzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gtc3ssx Post-Quantum Cryptography in OpenPGP - an IETF draft<br/><br/>#openpgp #pgp #postquantum <br/><br/>🔗 <a href="https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/">https://datatracker.ietf.org/doc/draft-ietf-openpgp-pqc/</a> 2024-11-07T05:43:59Z https://yabu.me/nevent1qqsv0nk96q0rc946n2mgmeqpj3rq53ecgnu4vytxtp5shc8sc9vq8vgzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gu0nhe3 The latest proposal from <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1djqmz389kefncr7cu2c5p07yh4fmv70pamkmxxyxk6ht97funs2srdzj5f" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Open Source Initiative :osi:</span> (<span class="italic">npub1djq…zj5f</span>)</a></span> poses significant risks to the true principles of open source. This concern reminds me of my primary issue with EPSS, where the model is documented in a paper, yet relies on proprietary data sources that aren’t accessible for reproduction. It&#39;s like having free/open source software without the entire build chain needed to create the executable code.<br/><br/>What’s the actual reasoning behind this clause?<br/><br/><a href="https://opensource.org/ai/drafts/the-open-source-ai-definition-1-0-rc2">https://opensource.org/ai/drafts/the-open-source-ai-definition-1-0-rc2</a><br/><br/>#opensource #fauxpensource #ai<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/378/496/382/426/809/original/55195ea4179000cc.jpeg"> <br/> 2024-10-27T08:49:46Z https://yabu.me/nevent1qqsg7hg8297qhnucg63pjmyfw2u6kalc4tnhkhp23wlt64qv9kvd9tszyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gylw4su We announce the release of onion-lookup v0.1. This open source tool and service is designed to help you search for Tor hidden services / .onion services quickly and efficiently. With its sleek API and user-friendly online interface, onion-lookup simplifies the process of querying and exploring onion addresses without browsing Tor and gather more information.<br/><br/>🔗 Online version <a href="https://onion.ail-project.org/">https://onion.ail-project.org/</a><br/>🔗 Source code <a href="https://github.com/ail-project/onion-lookup">https://github.com/ail-project/onion-lookup</a><br/><br/>#tor #darkweb #osint #opensource #infosec #onion <br/><br/>The information is relying on a [@ail_project](<a href="https://infosec.exchange/@ail_project">https://infosec.exchange/@ail_project</a> ) instance operated by the AIL project.<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/266/500/768/615/308/original/cb454d72770f561b.png"> <br/> 2024-10-07T14:05:28Z https://yabu.me/nevent1qqsrtmrq24jw3sxp0cdyxaw4mvwk5veha9670ve840ehf08040p4fkczyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gw26zaj In reply to <a href='/nevent1qqsqg87gad8ftgq3k2pw6cnhuntnyc4gq82c8678m3kd74ck2rpwjdgm5kl7m'>nevent1q…kl7m</a><br/>_________________________<br/><br/>If you are curious about the history of vulnerabilities in cups <br/><br/><a href="https://vulnerability.circl.lu/search?vendor=cups&amp;product=cups&amp;vendor_vuln=">https://vulnerability.circl.lu/search?vendor=cups&amp;product=cups&amp;vendor_vuln=</a> 2024-09-26T20:37:13Z https://yabu.me/nevent1qqsqg87gad8ftgq3k2pw6cnhuntnyc4gq82c8678m3kd74ck2rpwjdgzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gj9x9hc « A series of bugs in the CUPS printers discovery mechanism (cups-browsed) and in other components of the CUPS system, can be chained together to allow a remote attacker to automatically install a malicious printer (or hijack an existing one via mDNS) to execute arbitrary code on the target host as the lp user when a print job is sent to it. »<br/><br/>Ok…. don’t expose your print server to the Internet. Wait for the update from your favorite open source operating system. Nothing new under the sun.<br/><br/>#cups #vulnerability #infosec <br/><br/><a href="https://gist.github.com/stong/c8847ef27910ae344a7b5408d9840ee1">https://gist.github.com/stong/c8847ef27910ae344a7b5408d9840ee1</a> 2024-09-26T20:06:04Z https://yabu.me/nevent1qqswdapkmhv7patkg7w59j6ssady78a4f4hgjgfcl2u4ycmhh78v84gzyqmkv9p0e0u7rp3emteg8njy9dtyfanfyglwz904dqtn2yu8paa7gh4f4p5 A funny phishing targeting GitHub users with an email notification about a security issue on a existing repository.<br/><br/>Then the captcha verification on a malicious website is trying to trick the user to run a shell command on Windows.<br/><br/>🔗 Powershell to be executed by the user <br/><a href="https://gist.github.com/adulau/6cf6f3e9c5bbd9106af8814d0a22f473">https://gist.github.com/adulau/6cf6f3e9c5bbd9106af8814d0a22f473</a><br/><br/>🔗 File downloaded <a href="https://pandora.circl.lu/analysis/21e8f693-361b-4a04-853c-276f9dd841e4/seed-1XqUr4mADaFYlLAyrBH8oQUBgOoEbceZ586b8h05YyA">https://pandora.circl.lu/analysis/21e8f693-361b-4a04-853c-276f9dd841e4/seed-1XqUr4mADaFYlLAyrBH8oQUBgOoEbceZ586b8h05YyA</a> - Lumma Stealer <br/><br/>🔗 Malicious domain analysis. <a href="https://lookyloo.circl.lu/tree/91106035-dfec-4acc-af06-c9fc36c62774">https://lookyloo.circl.lu/tree/91106035-dfec-4acc-af06-c9fc36c62774</a><br/><br/>#malware #malwareanalysis #infosec<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/160/470/862/757/558/original/529545749cc9d6ca.png"> <br/> 2024-09-18T20:48:23Z