222 matches found
DFIRArtifactMuseum
DFIR Artifact Museum 描述 DFIR Artifact Museum 是一个由社区驱动的 DFIR 相关痕迹（artifacts）档案库，旨在为来自各种操作系统的痕迹示例提供一个集中的存放位置。 目的 提高样本痕迹的可获取性，让个别研究人员无需重复劳动去生成数据——坦率地说，这些数据本应只生成一次，然后与社区共享，从而将更多时间和精力花在分析上，而不是痕迹生成上。 益处 希望随着来自各种操作系统的痕迹集中存放于同一处、获得更多曝光，从未使用过 Linux 的人也能更熟悉 Linux 痕迹的样子。同样，对于只用 Linux、不用 Windows 的人来说也是如此。...
CVE-2026-16751
Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...
EUVD-2026-50323
Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...
CVE-2026-16751 Ente Museum Server Authorization Bypass Vulnerability
Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...
CVE-2026-16751 Ente Museum Server Authorization Bypass Vulnerability
Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...
PT-2026-65794
Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emergency contact to bypass the configured recovery waiting period and take over the victim's account via a crafted approve-recovery...
AI is distorting the Holocaust (Lock and Code S07E10)
This week on the Lock and Code podcast … In May of last year, a warning about AI came from somewhere unexpected: The Auschwitz-Birkenau State Museum. Posting publicly on social media, the museum warned about a Facebook account using generative AI to create fake images of people who died in the...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: My coauthor Nathan E. Sanders and I are speaking at the Rayburn House Office Building in Washington, DC at noon ET on November 17, 2025. The event is hosted by the POPVOX Foundation and the topic is “AI and Congress: Practical Step...
CVE-2025-61723 vulnerabilities
Vulnerabilities for packages: mongo-tools, kube-metrics-adapter, hivemind, dive, kubernetes-dashboard-metrics-scraper, secrets-store-csi-driver-provider-aws, nova, fscrypt, manifest-tool, etcd, policy-controller, envconsul, regclient, trillian, wgcf, age, neuvector-sigstore-interface,...
CVE-2025-58189 vulnerabilities
Vulnerabilities for packages: mongo-tools, kube-metrics-adapter, hivemind, dive, kubernetes-dashboard-metrics-scraper, secrets-store-csi-driver-provider-aws, nova, fscrypt, manifest-tool, etcd, policy-controller, envconsul, regclient, trillian, wgcf, age, neuvector-sigstore-interface,...
GHSA-447V-2QG4-H8HC vulnerabilities
Vulnerabilities for packages: mongo-tools, kube-metrics-adapter, hivemind, dive, kubernetes-dashboard-metrics-scraper, secrets-store-csi-driver-provider-aws, nova, fscrypt, manifest-tool, etcd, policy-controller, envconsul, regclient, trillian, wgcf, age, neuvector-sigstore-interface,...
GHSA-CXQ7-XW9V-RCV3 vulnerabilities
Vulnerabilities for packages: ghaudit, falco-exporter, cloud-provider-vsphere, helm-docs, dynamic-localpv-provisioner, kubelet-csr-approver, bom, oauth2-proxy-fips, crossplane, db-operator-fips, amazon-k8s-cni-fips, cluster-api-provider-vsphere-fips, jsonnet-bundler, opensearch-k8s-operator,...
EUVD-2014-7565
Malware in sbrugna...
EUVD-2014-7526
Malware in sbrugna...
EUVD-2024-23109
Malicious code in bioql PyPI...
CVE-2025-55198 vulnerabilities
Vulnerabilities for packages: flux-source-controller, helm-mapkubeapis, linkerd2, nova, k8sgpt, istio, helm-docs, kubescape, helm-set-status, zarf, envoy-gateway, flux, zot, trivy, headlamp, eksctl, cerbos, k8ssandra-client, pluto, kargo, helm-operator, cluster-api-helm-controller, helm-push, kot...
GHSA-9H84-QMV7-982P vulnerabilities
Vulnerabilities for packages: flux-source-controller, helm-mapkubeapis, linkerd2, nova, k8sgpt, istio, helm-docs, kubescape, helm-set-status, zarf, envoy-gateway, flux, zot, trivy, headlamp, eksctl, cerbos, k8ssandra-client, pluto, kargo, tw, helm-operator, cluster-api-helm-controller, helm-push,...
Black Hat 2025: Why We Built a Museum Instead of a Booth
Think you know what to expect from a conference booth? Think again. Forget the cliches: the swag destined for the back of your wardrobe, the formula one simulators, the marketing trickery. Instead, step into a new kind of conference experience, one that takes you on a journey through past, presen...
