DFIRArtifactMuseum

DFIR Artifact Museum Description The DFIR Artifact Museum is a community-driven archive of DFIR-related artifacts. It was created to provide a centralized location for examples of artifacts from various operating systems. Purpose To increase accessibility to sample artifacts without individual...

CVE-2026-16751

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

CVE-2026-16751 Ente Museum Server Authorization Bypass Vulnerability

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

CVE-2026-16751 Ente Museum Server Authorization Bypass Vulnerability

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

EUVD-2026-50323

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

CVE-2026-16751 Ente Museum Server Authorization Bypass Vulnerability

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

CVE-2026-16751

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted "approve-recovery...

CVE-2026-16751: Undefined Security Weakness

Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...

PT-2026-65794

Name of the Vulnerable Software and Affected Versions Ente Museum Server affected versions not specified Description An authorization bypass exists in the emergency recovery approval component. An authenticated attacker who is designated as a victim's emergency contact can bypass the established...

AI is distorting the Holocaust (Lock and Code S07E10)

This week on the Lock and Code podcast … In May of last year, a warning about AI came from somewhere unexpected: The Auschwitz-Birkenau State Museum. Posting publicly on social media, the museum warned about a Facebook account using generative AI to create fake images of people who died in the...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: My coauthor Nathan E. Sanders and I are speaking at the Rayburn House Office Building in Washington, DC at noon ET on November 17, 2025. The event is hosted by the POPVOX Foundation and the topic is “AI and Congress: Practical Step...

GHSA-447V-2QG4-H8HC vulnerabilities

Vulnerabilities for packages: tofu-controller, vexctl, kubernetes-csi-external-attacher, etcd, policy-controller, dbmate, kubecolor, age, falco-no-driver, fscrypt, kapp, sbom-convert, sigstore-scaffolding, kubebuilder, rootlesskit, render-template, dynamic-localpv-provisioner, mongo-tools, glow,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: tofu-controller, vexctl, kubernetes-csi-external-attacher, etcd, policy-controller, dbmate, kubecolor, age, falco-no-driver, fscrypt, kapp, sbom-convert, sigstore-scaffolding, kubebuilder, rootlesskit, render-template, dynamic-localpv-provisioner, mongo-tools, glow,...

CVE-2025-58189 vulnerabilities

Vulnerabilities for packages: tofu-controller, vexctl, kubernetes-csi-external-attacher, etcd, policy-controller, dbmate, kubecolor, age, falco-no-driver, fscrypt, kapp, sbom-convert, sigstore-scaffolding, kubebuilder, rootlesskit, render-template, dynamic-localpv-provisioner, mongo-tools, glow,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: ucd, spiffe-helper, ipfs-cluster, regclient, custom-pod-autoscaler-operator, argo-cd, k6, falcoctl, velero-plugin-for-aws, litefs, speedtest-go, kube-oidc-proxy, external-dns-fips, ansible-operator, helm-mapkubeapis, kafkaexporter,...

EUVD-2014-7526

Malware in sbrugna...

EUVD-2014-7565

Malware in sbrugna...

EUVD-2024-23109

Malicious code in bioql PyPI...

CVE-2025-55198 vulnerabilities

Vulnerabilities for packages: k8sgpt, trivy-operator, cluster-api-helm-controller, flux-helm-controller, rancher-fleet, cerbos, kargo, chart-testing, zarf, envoy-gateway, linkerd2, headlamp, helm-docs, pluto, helm-operator, eksctl, k9s, cilium-cli, istio, kots, flux-source-controller, trivy, nova...

GHSA-9H84-QMV7-982P vulnerabilities

Vulnerabilities for packages: k8sgpt, trivy-operator, cluster-api-helm-controller, flux-helm-controller, rancher-fleet, cerbos, tw, kargo, chart-testing, zarf, envoy-gateway, linkerd2, headlamp, helm-docs, pluto, helm-operator, eksctl, k9s, cilium-cli, istio, kots, flux-source-controller, trivy,...