home.social

#cyber-security — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #cyber-security, aggregated by home.social.

fetched live
  1. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43490

    📊 Score: 5.3/10 (CVSS v3.1)
    📦 Product: Simple Online Leave Management System
    🏢 Vendor: CodeAstro
    📅 Updated: 2026-07-13

    📝 A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the ...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  2. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43490

    📊 Score: 5.3/10 (CVSS v3.1)
    📦 Product: Simple Online Leave Management System
    🏢 Vendor: CodeAstro
    📅 Updated: 2026-07-13

    📝 A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the ...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  3. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43490

    📊 Score: 5.3/10 (CVSS v3.1)
    📦 Product: Simple Online Leave Management System
    🏢 Vendor: CodeAstro
    📅 Updated: 2026-07-13

    📝 A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the ...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #vulnerability #cve #euvd #infosec #cybersecurity
  4. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43490

    📊 Score: 5.3/10 (CVSS v3.1)
    📦 Product: Simple Online Leave Management System
    🏢 Vendor: CodeAstro
    📅 Updated: 2026-07-13

    📝 A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the ...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  5. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43491

    📊 Score: 7.5/10 (CVSS v3.1)
    📅 Updated: 2026-07-13

    📝 A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the shared default namespace, where any user with the standard edit role can exec into them and obtain root access on cluster nodes.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  6. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43491

    📊 Score: 7.5/10 (CVSS v3.1)
    📅 Updated: 2026-07-13

    📝 A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the shared default namespace, where any user with the standard edit role can exec into them and obtain root access on cluster nodes.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  7. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43491

    📊 Score: 7.5/10 (CVSS v3.1)
    📅 Updated: 2026-07-13

    📝 A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the shared default namespace, where any user with the standard edit role can exec into them and obtain root access on cluster nodes.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #vulnerability #cve #euvd #infosec #cybersecurity
  8. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43491

    📊 Score: 7.5/10 (CVSS v3.1)
    📅 Updated: 2026-07-13

    📝 A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access in the shared default namespace, where any user with the standard edit role can exec into them and obtain root access on cluster nodes.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  9. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43493

    📊 Score: 2.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  10. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43493

    📊 Score: 2.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  11. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43493

    📊 Score: 2.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #vulnerability #cve #euvd #infosec #cybersecurity
  12. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43493

    📊 Score: 2.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  13. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43494

    📊 Score: 5.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  14. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43494

    📊 Score: 5.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  15. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43494

    📊 Score: 5.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #vulnerability #cve #euvd #infosec #cybersecurity
  16. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43494

    📊 Score: 5.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  17. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43495

    📊 Score: 5.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affe...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  18. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43495

    📊 Score: 5.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affe...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  19. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43495

    📊 Score: 5.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affe...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #vulnerability #cve #euvd #infosec #cybersecurity
  20. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43495

    📊 Score: 5.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affe...

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  21. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43492

    📊 Score: 5.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  22. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43492

    📊 Score: 5.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  23. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43492

    📊 Score: 5.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #vulnerability #cve #euvd #infosec #cybersecurity
  24. EUVD Bot @[email protected] ·

    🚨 EUVD-2026-43492

    📊 Score: 5.1/10 (CVSS v3.1)
    📦 Product: gawk
    🏢 Vendor: GNU
    📅 Updated: 2026-07-13

    📝 Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.

    🔗 euvd.enisa.europa.eu/vulnerabi

    #cybersecurity #infosec #euvd #cve #vulnerability

    #cybersecurity #infosec #euvd #cve #vulnerability
  25. N-gated Hacker News @[email protected] ·

    🎉 Breaking news: Our tech-savvy protagonist just turned "data breach" into a personal hobby. 🤦‍♂️ Yes, because nothing screams #digital #security like one-click uploading your life's work to xAI's servers. Bravo, truly on the cutting edge of #cybersecurity comedy! 🏆 #oops
    twitter.com/a_green_being/stat #data #breach #comedy #tech #news #HackerNews #ngated

    #digital #security #cybersecurity #oops #data #breach
  26. N-gated Hacker News @[email protected] ·

    🎉 Breaking news: Our tech-savvy protagonist just turned "data breach" into a personal hobby. 🤦‍♂️ Yes, because nothing screams #digital #security like one-click uploading your life's work to xAI's servers. Bravo, truly on the cutting edge of #cybersecurity comedy! 🏆 #oops
    twitter.com/a_green_being/stat #data #breach #comedy #tech #news #HackerNews #ngated

    #digital #security #cybersecurity #oops #data #breach
  27. N-gated Hacker News @[email protected] ·

    🎉 Breaking news: Our tech-savvy protagonist just turned "data breach" into a personal hobby. 🤦‍♂️ Yes, because nothing screams #digital #security like one-click uploading your life's work to xAI's servers. Bravo, truly on the cutting edge of #cybersecurity comedy! 🏆 #oops
    twitter.com/a_green_being/stat #data #breach #comedy #tech #news #HackerNews #ngated

    #digital #security #cybersecurity #oops #data #breach
  28. N-gated Hacker News @[email protected] ·

    🎉 Breaking news: Our tech-savvy protagonist just turned "data breach" into a personal hobby. 🤦‍♂️ Yes, because nothing screams #digital #security like one-click uploading your life's work to xAI's servers. Bravo, truly on the cutting edge of #cybersecurity comedy! 🏆 #oops
    twitter.com/a_green_being/stat #data #breach #comedy #tech #news #HackerNews #ngated

    #ngated #hackernews #news #tech #comedy #breach
  29. N-gated Hacker News @[email protected] ·

    🎉 Breaking news: Our tech-savvy protagonist just turned "data breach" into a personal hobby. 🤦‍♂️ Yes, because nothing screams #digital #security like one-click uploading your life's work to xAI's servers. Bravo, truly on the cutting edge of #cybersecurity comedy! 🏆 #oops
    twitter.com/a_green_being/stat #data #breach #comedy #tech #news #HackerNews #ngated

    #digital #security #cybersecurity #oops #data #breach
  30. Hacker News @[email protected] ·

    Grok uploaded my user directory to xAI's servers

    twitter.com/a_green_being/stat

    Comments: news.ycombinator.com/item?id=4

    #HackerNews #Grok #xAI #userdirectory #data #privacy #cybersecurity

    #hackernews #grok #xai #userdirectory #data #privacy
  31. Hacker News @[email protected] ·

    Grok uploaded my user directory to xAI's servers

    twitter.com/a_green_being/stat

    Comments: news.ycombinator.com/item?id=4

    #HackerNews #Grok #xAI #userdirectory #data #privacy #cybersecurity

    #hackernews #grok #xai #userdirectory #data #privacy
  32. Hacker News @[email protected] ·

    Grok uploaded my user directory to xAI's servers

    twitter.com/a_green_being/stat

    Comments: news.ycombinator.com/item?id=4

    #HackerNews #Grok #xAI #userdirectory #data #privacy #cybersecurity

    #hackernews #grok #xai #userdirectory #data #privacy
  33. Hacker News @[email protected] ·

    Grok uploaded my user directory to xAI's servers

    twitter.com/a_green_being/stat

    Comments: news.ycombinator.com/item?id=4

    #HackerNews #Grok #xAI #userdirectory #data #privacy #cybersecurity

    #cybersecurity #privacy #data #userdirectory #xai #grok
  34. Hacker News @[email protected] ·

    Grok uploaded my user directory to xAI's servers

    twitter.com/a_green_being/stat

    Comments: news.ycombinator.com/item?id=4

    #HackerNews #Grok #xAI #userdirectory #data #privacy #cybersecurity

    #hackernews #grok #xai #userdirectory #data #privacy
  35. N-gated Hacker News @[email protected] ·

    🚨🐒 Who knew a simple "grok" could turn into a "grokzilla" rampaging through your personal files and depositing them like love letters at GCS' doorstep? 😂 Perhaps next time, try saying "Grok, don't do that!" before unleashing it on your home directory, genius. 🤦‍♂️
    twitter.com/i/status/207659889 #grok #grokzilla #personalfiles #techhumor #cybersecurity #codingfails #HackerNews #ngated

    #grok #grokzilla #personalfiles #techhumor #cybersecurity #codingfails
  36. N-gated Hacker News @[email protected] ·

    🚨🐒 Who knew a simple "grok" could turn into a "grokzilla" rampaging through your personal files and depositing them like love letters at GCS' doorstep? 😂 Perhaps next time, try saying "Grok, don't do that!" before unleashing it on your home directory, genius. 🤦‍♂️
    twitter.com/i/status/207659889 #grok #grokzilla #personalfiles #techhumor #cybersecurity #codingfails #HackerNews #ngated

    #grok #grokzilla #personalfiles #techhumor #cybersecurity #codingfails
  37. N-gated Hacker News @[email protected] ·

    🚨🐒 Who knew a simple "grok" could turn into a "grokzilla" rampaging through your personal files and depositing them like love letters at GCS' doorstep? 😂 Perhaps next time, try saying "Grok, don't do that!" before unleashing it on your home directory, genius. 🤦‍♂️
    twitter.com/i/status/207659889 #grok #grokzilla #personalfiles #techhumor #cybersecurity #codingfails #HackerNews #ngated

    #grok #grokzilla #personalfiles #techhumor #cybersecurity #codingfails
  38. N-gated Hacker News @[email protected] ·

    🚨🐒 Who knew a simple "grok" could turn into a "grokzilla" rampaging through your personal files and depositing them like love letters at GCS' doorstep? 😂 Perhaps next time, try saying "Grok, don't do that!" before unleashing it on your home directory, genius. 🤦‍♂️
    twitter.com/i/status/207659889 #grok #grokzilla #personalfiles #techhumor #cybersecurity #codingfails #HackerNews #ngated

    #ngated #hackernews #codingfails #cybersecurity #techhumor #personalfiles
  39. N-gated Hacker News @[email protected] ·

    🚨🐒 Who knew a simple "grok" could turn into a "grokzilla" rampaging through your personal files and depositing them like love letters at GCS' doorstep? 😂 Perhaps next time, try saying "Grok, don't do that!" before unleashing it on your home directory, genius. 🤦‍♂️
    twitter.com/i/status/207659889 #grok #grokzilla #personalfiles #techhumor #cybersecurity #codingfails #HackerNews #ngated

    #grok #grokzilla #personalfiles #techhumor #cybersecurity #codingfails
  40. Hacker News @[email protected] ·

    Grok CLI uploaded the whole home directory to GCS

    twitter.com/i/status/207659889

    Comments: news.ycombinator.com/item?id=4

    #HackerNews #GrokCLI #GCS #DataUpload #CyberSecurity #TechNews #HomeDirectory

    #hackernews #grokcli #gcs #dataupload #cybersecurity #technews
  41. Hacker News @[email protected] ·

    Grok CLI uploaded the whole home directory to GCS

    twitter.com/i/status/207659889

    Comments: news.ycombinator.com/item?id=4

    #HackerNews #GrokCLI #GCS #DataUpload #CyberSecurity #TechNews #HomeDirectory

    #hackernews #grokcli #gcs #dataupload #cybersecurity #technews
  42. Hacker News @[email protected] ·

    Grok CLI uploaded the whole home directory to GCS

    twitter.com/i/status/207659889

    Comments: news.ycombinator.com/item?id=4

    #HackerNews #GrokCLI #GCS #DataUpload #CyberSecurity #TechNews #HomeDirectory

    #hackernews #grokcli #gcs #dataupload #cybersecurity #technews
  43. Hacker News @[email protected] ·

    Grok CLI uploaded the whole home directory to GCS

    twitter.com/i/status/207659889

    Comments: news.ycombinator.com/item?id=4

    #HackerNews #GrokCLI #GCS #DataUpload #CyberSecurity #TechNews #HomeDirectory

    #homedirectory #technews #cybersecurity #dataupload #gcs #grokcli
  44. Hacker News @[email protected] ·

    Grok CLI uploaded the whole home directory to GCS

    twitter.com/i/status/207659889

    Comments: news.ycombinator.com/item?id=4

    #HackerNews #GrokCLI #GCS #DataUpload #CyberSecurity #TechNews #HomeDirectory

    #hackernews #grokcli #gcs #dataupload #cybersecurity #technews
  45. Jerry Gamblin @[email protected] ·

    PURL was supposed to be the upgrade. A package-native identifier built to describe the open-source packages CPE never handled well. Here is where it actually landed in the CVE feed: about 2% of 2026 CVEs, and most of that from a single third-party CNA.

    As CNAs write them, 75% of CVEs carry neither CPE nor PURL. Then NVD and CISA go to work: they backfill CPEs and cut that no-ID pile to 41%. Every point of that improvement is CPE. They add zero PURLs, and not by choice. NVD has no PURL field to fill.

    Here is the strange part. PURL is alive and well outside this pipeline, in OSV, GitHub Security Advisories, and every SBOM and SCA tool. It just never made it into the CVE and NVD pipeline that most of the industry still triages from. The problem is not PURL. It is that the feed everyone relies on structurally cannot see it. How long do we keep matching CVEs to assets through a format that cannot name a package?

    #vulnerabilitymanagement #cybersecurity #CVE

    #vulnerabilitymanagement #cybersecurity #cve
  46. Jerry Gamblin @[email protected] ·

    PURL was supposed to be the upgrade. A package-native identifier built to describe the open-source packages CPE never handled well. Here is where it actually landed in the CVE feed: about 2% of 2026 CVEs, and most of that from a single third-party CNA.

    As CNAs write them, 75% of CVEs carry neither CPE nor PURL. Then NVD and CISA go to work: they backfill CPEs and cut that no-ID pile to 41%. Every point of that improvement is CPE. They add zero PURLs, and not by choice. NVD has no PURL field to fill.

    Here is the strange part. PURL is alive and well outside this pipeline, in OSV, GitHub Security Advisories, and every SBOM and SCA tool. It just never made it into the CVE and NVD pipeline that most of the industry still triages from. The problem is not PURL. It is that the feed everyone relies on structurally cannot see it. How long do we keep matching CVEs to assets through a format that cannot name a package?

    #vulnerabilitymanagement #cybersecurity #CVE

    #vulnerabilitymanagement #cybersecurity #cve
  47. Jerry Gamblin @[email protected] ·

    PURL was supposed to be the upgrade. A package-native identifier built to describe the open-source packages CPE never handled well. Here is where it actually landed in the CVE feed: about 2% of 2026 CVEs, and most of that from a single third-party CNA.

    As CNAs write them, 75% of CVEs carry neither CPE nor PURL. Then NVD and CISA go to work: they backfill CPEs and cut that no-ID pile to 41%. Every point of that improvement is CPE. They add zero PURLs, and not by choice. NVD has no PURL field to fill.

    Here is the strange part. PURL is alive and well outside this pipeline, in OSV, GitHub Security Advisories, and every SBOM and SCA tool. It just never made it into the CVE and NVD pipeline that most of the industry still triages from. The problem is not PURL. It is that the feed everyone relies on structurally cannot see it. How long do we keep matching CVEs to assets through a format that cannot name a package?

    #vulnerabilitymanagement #cybersecurity #CVE

    #vulnerabilitymanagement #cybersecurity #cve
  48. Jerry Gamblin @[email protected] ·

    PURL was supposed to be the upgrade. A package-native identifier built to describe the open-source packages CPE never handled well. Here is where it actually landed in the CVE feed: about 2% of 2026 CVEs, and most of that from a single third-party CNA.

    As CNAs write them, 75% of CVEs carry neither CPE nor PURL. Then NVD and CISA go to work: they backfill CPEs and cut that no-ID pile to 41%. Every point of that improvement is CPE. They add zero PURLs, and not by choice. NVD has no PURL field to fill.

    Here is the strange part. PURL is alive and well outside this pipeline, in OSV, GitHub Security Advisories, and every SBOM and SCA tool. It just never made it into the CVE and NVD pipeline that most of the industry still triages from. The problem is not PURL. It is that the feed everyone relies on structurally cannot see it. How long do we keep matching CVEs to assets through a format that cannot name a package?

    #vulnerabilitymanagement #cybersecurity #CVE

    #cve #cybersecurity #vulnerabilitymanagement
  49. Turkiye @[email protected] ·

    ByLock IDs reveal FETÖ’s internal hierarchy in Türkiye

    Turkish National Intelligence Organization (MIT)’s cyber operation against the encrypted messaging application ByLock uncovered the internal communication network…
    #EuropeSays #Turkiye #Türkiye #ByLock #COUNTER-TERRORISM #CYBERSECURITY #FETÖ #GülenistTerrorGroup #July15coupattempt #MIT #NationalIntelligenceOrganization
    europesays.com/turkiye/29372/

    #nationalintelligenceorganization #mit #july15coupattempt #gulenistterrorgroup #feto #cybersecurity
  50. Lazou @[email protected] ·

    🔐 Mein PGP-Keygenerator hat ein notwendiges Sicherheitsupdate auf v1.1.1 erhalten.

    ✅ Neu ist eine Integritätsprüfung per SHA-256 für OpenPGP.js und JSZip.js.

    Dabei wird OpenPGP.js lokal für die Erzeugung der Schlüsselpaare und JSZip.js für deren Export als ZIP-Datei verwendet. Dadurch blockiert der Browser veränderte oder manipulierte Skriptdateien automatisch, bevor sie ausgeführt werden.

    ➡️ secunis.de/pgp-keygenerator.ht

    :boost_ok:

    #OpenPGP #PGP #ITSecurity #CyberSecurity #OpenSource #Datenschutz #Secunis

    #openpgp #pgp #itsecurity #cybersecurity #opensource #datenschutz
  51. Lazou @[email protected] ·

    🔐 Mein PGP-Keygenerator hat ein notwendiges Sicherheitsupdate auf v1.1.1 erhalten.

    ✅ Neu ist eine Integritätsprüfung per SHA-256 für OpenPGP.js und JSZip.js.

    Dabei wird OpenPGP.js lokal für die Erzeugung der Schlüsselpaare und JSZip.js für deren Export als ZIP-Datei verwendet. Dadurch blockiert der Browser veränderte oder manipulierte Skriptdateien automatisch, bevor sie ausgeführt werden.

    ➡️ secunis.de/pgp-keygenerator.ht

    :boost_ok:

    #OpenPGP #PGP #ITSecurity #CyberSecurity #OpenSource #Datenschutz #Secunis

    #openpgp #pgp #itsecurity #cybersecurity #opensource #datenschutz
  52. Lazou @[email protected] ·

    🔐 Mein PGP-Keygenerator hat ein notwendiges Sicherheitsupdate auf v1.1.1 erhalten.

    ✅ Neu ist eine Integritätsprüfung per SHA-256 für OpenPGP.js und JSZip.js.

    Dabei wird OpenPGP.js lokal für die Erzeugung der Schlüsselpaare und JSZip.js für deren Export als ZIP-Datei verwendet. Dadurch blockiert der Browser veränderte oder manipulierte Skriptdateien automatisch, bevor sie ausgeführt werden.

    ➡️ secunis.de/pgp-keygenerator.ht

    :boost_ok:

    #OpenPGP #PGP #ITSecurity #CyberSecurity #OpenSource #Datenschutz #Secunis

    #secunis #datenschutz #opensource #cybersecurity #itsecurity #pgp
  53. Lazou @[email protected] ·

    🔐 Mein PGP-Keygenerator hat ein notwendiges Sicherheitsupdate auf v1.1.1 erhalten.

    ✅ Neu ist eine Integritätsprüfung per SHA-256 für OpenPGP.js und JSZip.js.

    Dabei wird OpenPGP.js lokal für die Erzeugung der Schlüsselpaare und JSZip.js für deren Export als ZIP-Datei verwendet. Dadurch blockiert der Browser veränderte oder manipulierte Skriptdateien automatisch, bevor sie ausgeführt werden.

    ➡️ secunis.de/pgp-keygenerator.ht

    :boost_ok:

    #OpenPGP #PGP #ITSecurity #CyberSecurity #OpenSource #Datenschutz #Secunis

    #openpgp #pgp #itsecurity #cybersecurity #opensource #datenschutz
  54. Hugo | DevOps | Cybersecurity @[email protected] ·

    Elementor: 74 CVEs, all unpatched. Max CVSS 8.8. Top weakness: XSS (CWE-79). Trust Score: C. Your WordPress site may be at risk – check your plugins. #Elementor #WordPress #cybersecurity

    valtersit.com/vendors/elemento

    #elementor #wordpress #cybersecurity
  55. Hugo | DevOps | Cybersecurity @[email protected] ·

    Elementor: 74 CVEs, all unpatched. Max CVSS 8.8. Top weakness: XSS (CWE-79). Trust Score: C. Your WordPress site may be at risk – check your plugins. #Elementor #WordPress #cybersecurity

    valtersit.com/vendors/elemento

    #elementor #wordpress #cybersecurity
  56. Hugo | DevOps | Cybersecurity @[email protected] ·

    Elementor: 74 CVEs, all unpatched. Max CVSS 8.8. Top weakness: XSS (CWE-79). Trust Score: C. Your WordPress site may be at risk – check your plugins. #Elementor #WordPress #cybersecurity

    valtersit.com/vendors/elemento

    #elementor #wordpress #cybersecurity
  57. Hugo | DevOps | Cybersecurity @[email protected] ·

    Elementor: 74 CVEs, all unpatched. Max CVSS 8.8. Top weakness: XSS (CWE-79). Trust Score: C. Your WordPress site may be at risk – check your plugins. #Elementor #WordPress #cybersecurity

    valtersit.com/vendors/elemento

    #cybersecurity #wordpress #elementor
  58. Hugo | DevOps | Cybersecurity @[email protected] ·

    Elementor: 74 CVEs, all unpatched. Max CVSS 8.8. Top weakness: XSS (CWE-79). Trust Score: C. Your WordPress site may be at risk – check your plugins. #Elementor #WordPress #cybersecurity

    valtersit.com/vendors/elemento

    #elementor #wordpress #cybersecurity
  59. Daily CyberSecurity @[email protected] ·

    A critical privilege escalation flaw (CVE-2026-20744) affects Hydro-Québec EV charging stations. Learn how this vulnerability impacts the backend.

    #CVE202620744 #CyberSecurity #HydroQuebec #EVSecurity #Vulnerability

    securityonline.info/cve-2026-2

    #cve202620744 #cybersecurity #hydroquebec #evsecurity #vulnerability
  60. Daily CyberSecurity @[email protected] ·

    A critical privilege escalation flaw (CVE-2026-20744) affects Hydro-Québec EV charging stations. Learn how this vulnerability impacts the backend.

    #CVE202620744 #CyberSecurity #HydroQuebec #EVSecurity #Vulnerability

    securityonline.info/cve-2026-2

    #vulnerability #evsecurity #hydroquebec #cybersecurity #cve202620744