TLDR: #infosec #cloud #devops #OpenSource #JC #MostlyHarmless 👋🏻🔒 Friendly British Security/Technology wonk. 😇🙏 Good guy wannabe. ✍🏻👽 Sci-fi author. 👦🏻👦🏻 Father to twins (one passed away 24 Feb 2024) with severe learning difficulties and other disabilities. 🦸🏻♀️ Husband to superhero wife. ⚖️ Solicitor (no longer practising law though). ✝️ To everything there is a season. 🔐👍🏻 Visit my website for secure/private methods of contacting me
Rob Pomeroy
@robpomeroy@infosec.exchange
infosec.exchange
I've released VulnTrends v1.2.0.
Rather than adding lots of new features, this update focuses on improving the foundations:
• Higher quality data
• Better analysis
• New explanatory pages describing each metric and its limitations
• Greater transparency into how the charts are produced
The aim is to make VulnTrends a useful reference for understanding vulnerability disclosure and remediation trends—not just another CVE counter.
Feedback is always welcome.
https://vulntrends.org
Release notes:
https://github.com/robpomeroy/vulntrends/releases/tag/v1.2.0
#cybersecurity #opensource #infosec #analytics #bugpocalpyse #vulnpocalypse
Rob Pomeroy
@robpomeroy@infosec.exchange
TLDR: #infosec #cloud #devops #OpenSource #JC #MostlyHarmless 👋🏻🔒 Friendly British Security/Technology wonk. 😇🙏 Good guy wannabe. ✍🏻👽 Sci-fi author. 👦🏻👦🏻 Father to twins (one passed away 24 Feb 2024) with severe learning difficulties and other disabilities. 🦸🏻♀️ Husband to superhero wife. ⚖️ Solicitor (no longer practising law though). ✝️ To everything there is a season. 🔐👍🏻 Visit my website for secure/private methods of contacting me
infosec.exchange
Some people spend their holiday time on the beach. I play with websites, apparently. Don't tell Mrs P.
I've enhanced the data gathered for my open source project VulnTrends (v1.1.0), and the picture is even more pronounced than the project originally showed. It's impossible (and irresponsible) to ignore the impact of frontier (or well-harnessed) LLMs on vulnerability discovery.
Will there be a growing disparity between discovery and remedation? That remains to be seen. What IS certain is that the severity and quantity of bugs now discovered place immense pressure on patching. The loop (download, test, pilot, release) needs to be tighter than ever.
https://vulntrends.org
#bugpocalpyse #ai #llm #vulnerabilities
You've seen all posts