DFIRArtifactMuseum

DFIR Artifact Museum 설명 DFIR 아티팩트 박물관DFIR Artifact Museum은 커뮤니티 주도로 운영되는 DFIR 관련 아티팩트 아카이브입니다. 다양한 운영 체제의 아티팩트 사례를 한곳에 모아 제공하기 위해 만들어졌습니다. 목적 개별 연구자들이 데이터 생성에 중복된 노력을 들이지 않아도 샘플 아티팩트에 더 쉽게 접근할 수 있도록 하는 것입니다. 이러한 데이터는 솔직히 한 번만 생성한 뒤 커뮤니티와 공유되어야 하며, 그래야 아티팩트 생성보다 분석에 더 많은 시간과 에너지를 쏟을 수 있습니다. 이점 다양한...

CVE-2026-16751

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

CVE-2026-16751 Ente Museum Server Authorization Bypass Vulnerability

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

EUVD-2026-50323

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

CVE-2026-16751 Ente Museum Server Authorization Bypass Vulnerability

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

CVE-2026-16751 Ente Museum Server Authorization Bypass Vulnerability

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

PT-2026-65794

Name of the Vulnerable Software and Affected Versions Ente Museum Server affected versions not specified Description An authorization bypass exists in the emergency recovery approval component. An authenticated attacker who is designated as a victim's emergency contact can bypass the established...

CVE-2026-16751: Undefined Security Weakness

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

AI is distorting the Holocaust (Lock and Code S07E10)

This week on the Lock and Code podcast … In May of last year, a warning about AI came from somewhere unexpected: The Auschwitz-Birkenau State Museum. Posting publicly on social media, the museum warned about a Facebook account using generative AI to create fake images of people who died in the...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: My coauthor Nathan E. Sanders and I are speaking at the Rayburn House Office Building in Washington, DC at noon ET on November 17, 2025. The event is hosted by the POPVOX Foundation and the topic is “AI and Congress: Practical Step...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: minio-object-browser, cluster-proportional-autoscaler, helm-set-status, aws-sigv4-proxy, gops, otel-cli, podinfo, aws-node-termination-handler, chartmuseum, kubevela, terraform-docs, distribution, ghaudit, go-licenses, kubernetes-csi-external-attacher, nri-prometheus...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: minio-object-browser, cluster-proportional-autoscaler, helm-set-status, aws-sigv4-proxy, gops, otel-cli, podinfo, aws-node-termination-handler, chartmuseum, kubevela, terraform-docs, distribution, ghaudit, go-licenses, kubernetes-csi-external-attacher, nri-prometheus...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: minio-object-browser, cluster-proportional-autoscaler, helm-set-status, aws-sigv4-proxy, gops, otel-cli, podinfo, aws-node-termination-handler, chartmuseum, kubevela, terraform-docs, distribution, ghaudit, go-licenses, kubernetes-csi-external-attacher, nri-prometheus...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: conftest-fips, otel-cli, wire-go, crossplane-provider-terraform, flyte, wave-fips, http-echo, mongodb-kubernetes-operator-fips, restic, octo-sts, kbld-fips, istio, prometheus-adapter-fips, sonobuoy, seaweedfs-operator-fips, elvish, wazero-fips, grpcurl, gpu-operator,...

EUVD-2014-7565

Malware in sbrugna...

EUVD-2014-7526

Malware in sbrugna...

EUVD-2024-23109

Malicious code in bioql PyPI...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: zot, helm-set-status, linkerd2, rancher-fleet, chartmuseum, cilium-cli, trivy, helm-mapkubeapis, istio, kots, k8ssandra-client, pluto, helm-docs, flux-helm-controller, kubescape, k8sgpt, headlamp, zarf, cerbos, k9s, chart-testing, flux-source-controller, helm-push,...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: tw, zot, helm-set-status, linkerd2, rancher-fleet, chartmuseum, cilium-cli, trivy, helm-mapkubeapis, istio, kots, k8ssandra-client, pluto, helm-docs, flux-helm-controller, kubescape, k8sgpt, headlamp, zarf, cerbos, k9s, chart-testing, flux-source-controller, helm-pus...

Black Hat 2025: Why We Built a Museum Instead of a Booth

Think you know what to expect from a conference booth? Think again. Forget the cliches: the swag destined for the back of your wardrobe, the formula one simulators, the marketing trickery. Instead, step into a new kind of conference experience, one that takes you on a journey through past, presen...