#psirt — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #psirt, aggregated by home.social.
-
Anyone else noticing that more and more people are saying "responsible disclosure" rather than "coordinated vulnerability disclosure" these days?
It feels like a regression. Thought we moved past this.
-
🚨 New #FirstImpressionsPodcast episode just dropped 🚨
AI can find vulnerabilities in minutes… but patching them? That’s where the real chaos begins.
FIRSTCON26 speakers, Vijay Sarvepalli and Christopher Cullen from the CMU Software Engineering Institute, dive in to unpack:
🔥 AI-generated vuln floods
🔥 Open source patching nightmares
🔥 “Just use pickle.loads” (famous last words)
🔥 Why Log4j still haunts security teams everywhere
🔥 How to automate security from source to releaseIf your #PSIRT process currently runs on caffeine, panic, and Slack messages at 2am… this episode is for you.
🎧 Tune in before #FIRSTCON26 and learn how the industry is trying to close the gap between “we found it” and “please patch immediately" - https://media.first.org/podcasts/FIRST_Impressions-vijay-chris.mp3
#FIRSTCON26 #CyberSecurity #OpenSource #PSIRT #VulnerabilityManagement #AI #DevSecOps
-
Cisco Confirms Critical CVE-2025-20352 Zero-Day RCE Vulnerability Under Active Exploitation https://thecyberexpress.com/cisco-ios-rce-vulnerability-cve-2025-20352/ #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202520352 #CyberNews #CiscoIOS #IOSXE #PSIRT #RCE
-
#fortiguard #psirt #fortios #security https://fortiguard.fortinet.com/psirt/FG-IR-24-535 lol :clippy: :cate: :KEKW:
-
Want to speak at #VulnCon2025 ? Apply today! The #CFP closes January 15, 2025. Learn more at: https://go.first.org/xjTt6 #vulnmanagement #CVEProgram #VulnerabilityMetadata #ManagingRisk #PSIRT #VEX #SupplyChainSecurity #VulnIdentifiers
-
Want to speak at #VulnCon2025 ? Apply today! The #CFP closes January 15, 2025. Learn more at: https://go.first.org/xjTt6 #vulnmanagement #CVEProgram #VulnerabilityMetadata #ManagingRisk #PSIRT #VEX #SupplyChainSecurity #VulnIdentifiers
-
Want to speak at #VulnCon2025 ? Apply today! The #CFP closes January 15, 2025. Learn more at: https://go.first.org/xjTt6 #vulnmanagement #CVEProgram #VulnerabilityMetadata #ManagingRisk #PSIRT #VEX #SupplyChainSecurity #VulnIdentifiers
-
Want to speak at #VulnCon2025 ? Apply today! The #CFP closes January 15, 2025. Learn more at: https://go.first.org/xjTt6 #vulnmanagement #CVEProgram #VulnerabilityMetadata #ManagingRisk #PSIRT #VEX #SupplyChainSecurity #VulnIdentifiers
-
Want to speak at #VulnCon2025 ? Apply today! The #CFP closes January 15, 2025. Learn more at: https://www.first.org/conference/vulncon2025/cfp #vulnmanagement #CVEProgram #VulnerabilityMetadata #ManagingRisk #PSIRT #VEX #SupplyChainSecurity #VulnIdentifiers
-
@chrysn The company that sells the device to me should make sure the software components are maintained. "Ask your CPU manufacturer" can't be the answer the customer gets.
Firmware bugs and vulnerabilities "may not be critical" but they just as well may. And the #PSIRT has to check that and take measures accordingly. If they just answer "we don't care about that product anymore" than I as the owner want to know that.
-
Unauthenticated, RCE vulnerability in Palo Alto firewalls, exploits in the wild
https://security.paloaltonetworks.com/CVE-2024-3400
#ycombinator #psirt #PANW #PAN #CVE #Report_Vulnerabilities #Palo_Alto_Networks -
Hot take for anyone who characterizes the lack of NIST-produced CVSS scores in the NVD as “flying blind” in vulnerability risk management practice: those scores were never intended to be the sole indicator of “risk.” By definition they don’t represent “risk” in any practical way.
-
The CVSS Special Interest Group is proud to announce the official release of CVSS v4.0. This latest release marks a significant step forward with added capabilities crucial for teams with the importance of using threat intelligence and environmental metrics for accurate scoring at its core.
Critical in the interface between supplier and consumer, CVSS provides a way to capture the principal characteristics of a security vulnerability and produces a numerical score reflecting its technical severity to inform and provide guidance to businesses, service providers, government, and the public.
The numerical score can be represented as a qualitative severity rating (such as low, medium, high, and critical) to help organizations properly assess and prioritize their vulnerability management processes and prepare defenses against cyber-attacks.
Furthermore, this system allows the consumer to also assess real-time threat and impact, arming them with vital information to help to defend themselves against an attack.
The Common Vulnerability Scoring System is a published standard used by organizations worldwide, and this latest version of CVSS 4.0 seeks to provide the highest fidelity of vulnerability assessment for both industry and the public.
More can be found here: https://first.org/cvss
-
A cool fuzzer I have been messing with after learning about it from Fortinet's latest PSIRT Advisories.
-
Meanwhile: A 2+ billion USD enterprise priding themselves to be researcher friendly (read: they promise maybe not sue you) have been unable to respond to a report of a critical #RCE #vulnerability within 5 business days.
Maybe they should throw more of that $$$ towards their #PSIRT ?
-
Did you miss #FIRSTCON23? Have no fear; the #FIRSTImpressions podcast is here! Check out the newest episode to learn about the critical role #PSIRT plays in Customer Trust, Adoption, and Renewal from con speakers, Kevin Hagopian and Emer O’Neill. ow.ly/IXa950OZIQB
-
Great to see the FIRST CTI event recognised as a go-to event for Cyber Threat Intel.
Register now for this year's event: https://www.first.org/conference/berlin2023/ and save the date for 2024: Apr 15-17.
https://blog.pulsedive.com/the-biggest-best-cti-events/
#FIRSTdotOrg #collaboration #BuildingTrust #PSIRT #CSIRT #CTI
-
That's a wrap - a great event in Kigali, Rwanda.
Min. Paula Ingabire (Minister of Information Communication Technology and Innovation) opened the FIRST, AfricaCERT and National Cyber Security Authority Rwanda symposium. 4 days of excellent content bringing together folks from 48 countries to collaborate, learn, build trust and discuss strategies to shape a secure internet for Africa.
#FIRSTdotOrg #collaboration #BuildingTrust #CSIRT #PSIRT #FIRSTAA23
-
The #CFP for the Balkan Cybersecurity Days 2023 Symposium is open! May 16-18 in Orhid, North Macedonia. Event overview and CFP guidelines available at https://www.first.org/events/colloquia/ohrid2023/cfp
@firstdotorg @DCAF_Geneva @MkdCirt @aecmk #collaboration #BuildingTrust #PSIRT #CSIRT
-
The opening sessions at the FIRST & AfricaCERT Symposium in Kigali, co-hosted by @AfricaCERT and @National Cyber Security Authority Rwanda. 2 days of training followed by a plenary session on Thursday. FIRST doing what FIRST does best - working with great partners to make the internet safer. #FIRSTdotOrg #collaboration #BuildingTrust #PSIRT #CSIRT
-
@da_667 @tinker @gaz @albinowax It's definitely not as easy as it sounds, said the #PSIRT guy
-
@jeffers00n @bryanbrake Reports of #Keybase death are greatly exaggerated. There's still a very large incident response community using it for multiparty coordination, among other things. #PSIRT
-
@jerry @johnoauth One word: #federation ! There is not simply one monolithic Mastodon server (like Twitter). If your spidey sense 🦸 gets triggered by a particular admin or a particular server, it's just a jump to the left (#RockyHorror) to sign up for a different server.
Personally, I moved from the melting pot mastodon.social to infosec.exchange, and feel very, very comfortable here. But I'm a #PSIRT #infosec geek, so it makes sense.
P.S. @jerry rocks!