Show threadNeustradamus :xmpp: :linux:May 7, 2025
#Vulnerabilties in #Apache #OpenOffice (#ApacheOpenOffice / #OpenOfficeOrg / #AOO), do not forget to replace by #LibreOffice for security and improvements (#DocumentFoundation / #OpenDocument / #OpenOffice / #StarOffice / #OfficeSuite / #ProductivitySoftware) https://www.libreoffice.org/
LibreOffice

LibreOffice is a free office suite

mauvehed 🐿️ (KØMVH)Apr 24, 2025

I wrote a Discord bot to monitor for CVEs being mentioned in chat, and then it will fetch the details and post it back to chat.

It also has a feature to monitor for new KEV notifications and send them to a dedicated channel

Collab with me. Use it. Abuse it. What ever ya want!

https://github.com/mauvehed/kevvy

#CVSS #CVE #KEV #CISA #Vulnerabilties #Discord

GitHub - mauvehed/kevvy: A Discord bot for searching the Common Vulnerabilities and Exposures (CVE) list and providing KEV updates.

A Discord bot for searching the Common Vulnerabilities and Exposures (CVE) list and providing KEV updates. - mauvehed/kevvy

GitHub
Benjamin Carr, Ph.D. πŸ‘¨πŸ»β€πŸ’»πŸ§¬Nov 23, 2024
#AI #bugbounty program yields 34 flaws in #opensource tools
Nearly three dozen flaws in open-source AI and #machinelearning (ML) tools were disclosed Tuesday as part of #ProtectAI's #huntr bug bounty program.
Protect AI's #security researchers point out these open-source tools are "downloaded thousands of times a month to build enterprise AI Systems."
The three critical #vulnerabilties have already been addressed by their respective companies, according to the article.
https://www.scworld.com/news/ai-bug-bounty-program-yields-34-flaws-in-open-source-tools
AI bug bounty program yields 34 flaws in open-source tools

The discoveries included three critical security vulnerabilities and 18 high-severity flaws.

SC Media
Bob CarverSep 11, 2024
https://securityintelligence.com/articles/chatgpt4-exploit-87-percent-vulnerabilities-really-impressive/ #cybersecurity #ChatGPT4 #vulnerabilties
ChatGPT 4 can exploit 87% of one-day vulnerabilities: Really that impressive?

Some research suggests the catastrophic cybersecurity risks that large language models could pose. But are they really that dangerous?

Security Intelligence
CronicalDec 10, 2023

Tons of great examples of β€œhacking” in an extended sense of getting unintended results from any sort of system (including social, political etc). Summing up he quotes: Sociobiologist Edward O. Wilson who once described the fundamental problem with humanity is that "we have Paleolithic emotions, medieval institutions, and godlike technology."

Very strong problem definition. Less so on solutions, although he claims some ground for optimism. #hacking #vulnerabilties #exploits

Sebastien Le LourecJul 30, 2019
#Urgent11 #Vulnerabilties seem to be a big issue. VxWorks is present like... everywhere... See notable uses here : https://en.wikipedia.org/wiki/VxWorks#Notable_uses
and technical paper there : https://go.armis.com/hubfs/White-papers/Urgent11%20Technical%20White%20Paper.pdf
VxWorks - Wikipedia