The Radio Image Framing Protocol (RIFP) is an experimental, extensible standard for sending images over low-rate radio links. I did a new version 1.1 with an extension to authenticate the images.

The extension is now published as an Internet-Draft.

#rifp #radio #opensource #openstandard

🔗 RIFP source code https://github.com/adulau/rifp#optional-image-authentication

🔗 RIFP Standard https://datatracker.ietf.org/doc/draft-dulaunoy-rifp/

🔗 RFIP Authentication Extension https://datatracker.ietf.org/doc/draft-dulaunoy-rifp-auth/

Rulezet and its ecosystem: how detection rules travel between tools.

Vulnerability-Lookup, AIL, Flowintel, MISP, Velociraptor and more: every tool that reads from Rulezet or receives its rules, what each connection does, and an interactive map of the whole ecosystem.

🔗 https://rulezet.org/blog/post/fe4f4c93-94d5-45f9-88b2-792d74bda07f

#threatintelligence #threatintel #rulezet #misp #opensource #cybersecurity #detectionengineering #flowintel #velociraptor #dfir

@mttaggart Thank you very much! This is just the tip of the iceberg. A big surprise is coming in the next few weeks.

I want to call out the amazing work the @misp team has been doing the last few months. The recent updates have been phenomenal. The new UI has started to match MISP's look and feel to its underlying capabilities. It's much easier to recommend it as a foundation for a CTI program.

There seems to be a remarkably strong correlation on LinkedIn between people warning about the PQC threat and job titles containing “Account Manager” or “Sales”.

I’m sure it’s purely coincidental.

#pqc #cybersecurity #postquantumcryptography

A question for fellow open-source maintainers:

Imagine someone uses AI to redevelop your tool in Rust. The result barely works, but they reuse your project’s name and repeatedly jump into discussions about the existing project to promote their version.

How would you handle that? I’m usually a nice guy, but I still think that if someone keeps crashing your party, at some point you’re allowed to remind them they weren’t actually invited.

#ai #freesoftware #opensource #theory

We are pleased to announce the publication of GCVE BCP-07 version 3.0, extending the Known Exploited Vulnerability (KEV) Assertion Format with support for No Known Exploitable Vulnerability (NKEV) assessments. BCP-07 was initially designed to provide a structured, open and federated way to express exploitation assertions, including who made the assertion, when exploitation was observed or declared, what evidence supports it, and with what level of confidence. Version 3.0 keeps this KEV model intact while adding a complementary, product-oriented mechanism to assess whether known vulnerabilities are exploitable in a specific product context.

The distinction between KEV and NKEV is fundamental. A KEV assertion states that a producer has observed or otherwise asserts exploitation of a vulnerability. An NKEV assessment approaches the problem from a different direction: a specific product or product version is evaluated against explicitly identified vulnerability knowledge sources to determine whether known vulnerabilities are exploitable in the assessed context. The assessment takes into account the product, its configuration, the defined assessment scope, the knowledge sources consulted and a precise knowledge cut-off time. Its result can be pass, fail or inconclusive, making both the outcome and its limitations explicitly machine-readable.

🔗 https://gcve.eu/2026/10/05/gcve-bcp-07-v3.0-from-kev-to-nkev-no-known-exploitable-vulnerability-nkev-assessments/
🔗 Standard https://gcve.eu/bcp/gcve-bcp-07/

#kev #bcp #gcve #cve #nkev #vulnerabilityManagement #cybersecurity #openstandard

We don't sleep at @gcve and we updated the BCP-07 to support NKEV in addition to KEV.

Version 3.0 additionally defines a No Known Exploitable Vulnerability (NKEV) assessment format. An NKEV assessment is a product-level, time-bounded technical assessment stating whether known exploitable vulnerabilities were identified for a specific product or product version...

🔗 https://gcve.eu/bcp/gcve-bcp-07/

#kev #nkev #cybersecurity #cti #gcve #cve #vulnerabilitymanagement

The new Citrix Netscaler vuln from Friday is CVE-2026-88779, patch is out now and they recommend patching as soon as possible: https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174

Although the vuln is labeled “Memory overflow vulnerability leading to Denial of Service”, that’s the same as CVE-2025–6543. You may remember that lead to RCE in the wild. Prior blog on that: https://doublepulsar.com/citrix-forgot-to-tell-you-cve-2025-6543-has-been-used-as-a-zero-day-since-may-2025-d76574e2dd2c

We did a major update to our website:

https://www.circl.lu/

There are now RSS and Atom feeds available:

https://www.circl.lu/feeds/

and we have a complete overview of all our open-source and open-standard projects:

https://www.circl.lu/projects/

#circl #opensource #cybersecurity

Threat-Actor explorer v1.1.0 released with many improvements and upgrade to the latest Pivotick library Latest

A standalone, browser-only HTML/JavaScript application for exploring the MISP threat-actor galaxy, UUID-based relationships across every cluster in the MISP Galaxy repository, and shared MISP Galaxy metadata. Graph rendering is performed by Pivotick.

:github: https://github.com/adulau/threat-actor-explorer/releases/tag/v1.1.0
🌐 Online version https://foo.be/threat-actor-explorer/misp-threat-actor-explorer.html#actor=a5f64c1a-c829-4855-903d-e0ff2098b2d7

#misp #threatactor #threatintelligence #cybersecurity #mispgalaxy #cti #opensource #cybersecurity

We did some improvements in GCVE extension - GCVE BCP-05-X-03 - Vulnerability Handling and Disclosure Timeline.

We also review the alignment and interoperability with CSAF 2.1.

Now there is a new object field entities to represent the entities in the handling timeline.

🔗 GCVE BCP-05-X-03 https://gcve.eu/bcp/extension/gcve-bcp-05-x-03/
🔗 Commit with the changes to the extension https://github.com/gcve-eu/gcve.eu/commit/cec00b01c5b544b5f0aa7bd4d78e00bfddf87667

#csaf #gcve #cve #vulnerabilityManagement #vulnerability #openstandard #cra

GCVE BCP-05-X-03: Bringing Vulnerability Handling Timelines into Vulnerability Records.

Vulnerability records usually provide a good description of what a vulnerability is, which products are affected, how severe it may be, and where additional information can be found.

They are often much less effective at describing what happened, when it happened, and who was involved during the vulnerability handling and disclosure process.

Following many discussions during VulnOptiCON 2026 in Luxembourg, this limitation became particularly clear. Vulnerability analysts, coordinators, vendors and other participants repeatedly discussed how difficult it can be to reconstruct a reliable timeline during vulnerability analysis and coordinated vulnerability disclosure.

To help address this, the GCVE initiative has published a new extension:

GCVE BCP-05-X-03 - Vulnerability Handling and Disclosure Timeline.

The extension provides a structured and machine-readable way to represent the lifecycle of a vulnerability from discovery and reporting through acknowledgement, validation, remediation and public disclosure. It's already live in our open-source tool-set.

🔗 Blog post https://gcve.eu/2026/10/01/gcve-bcp-05-x-03-bringing-vulnerability-handling-timelines-into-vulnerability-records/

🔗 Extension https://gcve.eu/bcp/extension/gcve-bcp-05-x-03/

#opensource #openstandard #cve #gcve #cra #cybersecurity #vulnerability

"Dual-fit imperative in security leadership: a grounded theory investigation of CISO role enactment in modern organisations."

The thesis has a complete survey with some interesting answers from a small set of CISCO. Now the conclusion/recommendation seems a bit broad and very generic imho.

🔗 https://arxiv.org/pdf/2609.35887

#ciso #cybersecurity

The new AI conglomerates are publishing documents warning about the dangers of semi-open models that defenders can actually use, while those same conglomerates are restricting defenders’ access to their own models.

#ai #cybersecurity

🔗🤦 https://www.anthropic.com/research/glm-5-3-and-the-spread-of-advanced-cyber-capabilities

We were very happy to participate in Vulnopticon 2026 and to meet so many people interested in vulnerability identification, publication, coordination, and management.

The discussions during the conference and just as importantly, the conversations around and outside the formal sessions brought a lot of useful feedback, new ideas, questions, and potential directions for GCVE. These exchanges are especially valuable for a project such as GCVE, where openness, federation, interoperability, and experimentation are at the core of the initiative.

🔗 https://gcve.eu/2026/09/28/gcve-at-vulnopticon-2026/

#cve #gcve #vulnerabilityManagement #vulnerability #opensource

SH3LLC0D3 - Exploit Attempt Citrix NetScaler Pre-Auth RCE Zero-Day (watchTowr Advisory)

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490

🔗 Detection rules https://rulezet.org/rule/detail_rule/770971
🔗 CVE-2026-19490 https://vulnerability.circl.lu/vuln/cve-2026-19490

#citrix #netscaler #cybersecurity #vulnerability

The GCVE Workshop at Vulnopticon 2026 took place on 22 September in Luxembourg.

We discussed decentralized vulnerability allocation, digital sovereignty, CVD workflows, Vulnerability-Lookup, Vulniverse, AI-assisted vulnerability analysis, and the future of GCVE.

All slide decks and workshop materials are now available:

🔗 https://gcve.eu/2026/09/23/gcve-workshop-before-vulnopticon-2026-slides-and-materials/

Slides, examples, BCPs and open-source tooling are all linked from the workshop recap.

#cve #gcve #cvd #cybersecurity #opensource #vulnerability #vulnerabilityManagement

@gcve

Vulnerability-Lookup 6.2.0 is out with a lof of new features and improvements!

- Withdrawn KEV assertions and withdrawn vulnerability advisories
- Correlations through x_gcve relationships
- Retrieval with the ATT&CK bi-encoder
- EUVD analytics figures
- Improved home page

... and more:

👉 https://www.vulnerability-lookup.org/2026/09/18/vulnerability-lookup-6-2-0

Source code: https://github.com/vulnerability-lookup/vulnerability-lookup

#Vulnerability #OpenSource #Python #CVE #GCVE #VulnerabilityManagement

We talk a lot about digital sovereignty.

But who controls the vulnerability intelligence our infrastructure depends on?

Who owns the identifiers? Who controls the databases? Who decides when information becomes public? Who controls the models interpreting it?

Maybe sovereignty starts with the data.

👉 I’ll be discussing this through Vulnerability-Lookup, @gcve, open AI and the Fediverse at @oscl October 7.

#OpenSource #DigitalSovereignty #OSCL26 #OSClux #CyberSecurity #GCVE #Fediverse