iiinova — where your digital self keeps evolving

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 20/10/2026

I presented at the lighting talk of @hack_lu the `patch2vuln` is a command-line tool that turns a git-format patch into a structured draft vulnerability advisory using a locally hosted Ollama model. 🔗 GitHub github.com/gcve-eu/gcve-lab-patch2v… […] [Original post on infosec.exchange]

`patch2vuln` is a command-line tool that turns a git-format patch into a structured draft vulnerability advisory using a locally hosted Ollama model.

020 2

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 20/10/2026

MISP Modules v3.0.13 is a substantial release, bringing a new wave of OSINT and threat intelligence enrichment capabilities, new ways to export indicators into operational security tools, and new workflows for publishing IOCs directly to security platforms […] [Original post on infosec.exchange]

vulnerability-lookup expansion modules in MISP 3.0

011 1

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 16/10/2026

GCVE BCP-02 v1.9: Making Coordinated Vulnerability Disclosure Open, Accessible, and Practical for Everyone The GCVE initiative has published version 1.9 of GCVE BCP-02 . Practical Guide to Vulnerability Handling and Disclosure, introducing significant […] [Original post on infosec.exchange]

000 0

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 13/10/2026

Working on a new release of the CPE editor for @gcve which is the crowd-sourced way to handle and improve CPE records for CVE records or any vulnerability format using CPE. Now there is an nice visualisation of the relationships between vendors/products […] [Original post on infosec.exchange]

Explore approved relationships and the records in the combined view. Arrows follow the source → target direction; dashed links show ownership. The outlined node is the current record.

Drag nodes to arrange them, scroll to zoom, and drag the background to pan. Select a node or use the record picker to inspect it.

001 1

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 12/10/2026

I just pushed a new misp-module to support PTR classification on hostname and IP addresses in MISP. 🔗 MISP modules available www.misp-project.org/modules 🖇️ ptrclassify library github.com/adulau/ptrclassify @misp #cti #threatintel #threatintelligence #cybersecurity

Expansion on a MISP event using the ptrclassify misp-module.

011 1

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 10/10/2026

The Radio Image Framing Protocol (RIFP) is an experimental, extensible standard for sending images over low-rate radio links. I did a new version 1.1 with an extension to authenticate the images. The extension is now published as an Internet-Draft. #rifp […] [Original post on infosec.exchange]

033 3

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 09/10/2026

Rulezet and its ecosystem: how detection rules travel between tools. Vulnerability-Lookup, AIL, Flowintel, MISP, Velociraptor and more: every tool that reads from Rulezet or receives its rules, what each connection does, and an interactive map of the whole […] [Original post on infosec.exchange]

021 2

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 04/10/2026

Threat-Actor explorer v1.1.0 released with many improvements and upgrade to the latest Pivotick library Latest A standalone, browser-only HTML/JavaScript application for exploring the MISP threat-actor galaxy, UUID-based relationships across every cluster […] [Original post on infosec.exchange]

066 6

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 04/10/2026

We did some improvements in GCVE extension - GCVE BCP-05-X-03 - Vulnerability Handling and Disclosure Timeline. We also review the alignment and interoperability with CSAF 2.1. Now there is a new object field `entities` to represent the entities in the […] [Original post on infosec.exchange]

We also review the alignment and interoperability with CSAF 2.1. GCVE X-03

001 1

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 01/10/2026

GCVE BCP-05-X-03: Bringing Vulnerability Handling Timelines into Vulnerability Records. Vulnerability records usually provide a good description of what a vulnerability is, which products are affected, how severe it may be, and where additional information […] [Original post on infosec.exchange]

GCVE BCP-05-X-03 - Vulnerability Handling and Disclosure Timeline. Overview.

021 2

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 09/09/2026

The @gcve BCP-07 KEV format has been updated to allow the `Withdrawn` and `Reasserted` KEV Assertions. This allows to support case like CVE-2026-69836 . 🔗 gcve.eu/bcp/gcve-bcp-07/#withdrawn-… #cve #gcve #kev […] [Original post on infosec.exchange]

GCVE BCP-07 - Withdrawn and Reasserted KEV Assertions

001 1

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 13/08/2026

If you are curious about (nearly) everything we did the past months at the GCVE.eu initiative: gcve.eu/2026/08/13/gcve-recent-acti… We published a recap blog post. #gcve #cve #vulnerability […] [Original post on infosec.exchange]

GCVE recent activities: standards, software and a growing GNA community

021 2

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 12/08/2026

vulnerability-lookup 6.0 will be released this week with many (really, many!) new features. One of the smaller, but important, additions is support for multiple SSVC views alongside CVSS. When SSVC information is available from an ADP (such as CISA) , or […] [Original post on infosec.exchange]

020 2

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 11/08/2026

From a research paper to running open-source code in just a few days. We (with @cedric) have been experimenting in Vulnerability-Lookup with the concept of Local Exploit Hazard, based on the recent research paper “Modeling Local Exploit Hazard — A Bayesian […] [Original post on infosec.exchange]

Implementation of the paper in vulnerability-lookup

135 5

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 09/08/2026

Working on a first super beta implementation of @gcve BCP-11 "Community-Proposed Updates to Existing CVE Records" To validate if the BCP-11 can be published. #cve #gcve #vulnerability #opensource #opendata Discussions […] [Original post on infosec.exchange]

BCP-11 first implementation UI - to propose changes to existing CVE records.

030 3

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 03/08/2026

A standalone, browser-only HTML/JavaScript application for exploring the MISP threat-actor galaxy, UUID-based relationships across every cluster in the MISP Galaxy repository, and shared MISP Galaxy metadata. Graph rendering is performed by Pivotick. Source […] [Original post on infosec.exchange]

A Threat-Actor explorer (browser-local) from the MISP galaxy dataset.

Selection of the producer to limit the view to a specific vendor-naming.

131 3

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 01/08/2026

Sightings have long been a major topic of discussion in the CTI community, particularly in the field of vulnerability management. We have now published a GCVE BCP to standardise the format that has been implemented, tested and used operationally in […] [Original post on infosec.exchange]

Sighting overview on a vulnerability-lookup instance. db.gcve.eu

101 1

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 28/07/2026

The Radio Image Framing Protocol (RIFP) 1.0 is an experimental, extensible standard for sending images over low-rate radio links. The default rifp-cpfsk-4800 profile uses binary continuous-phase FSK and can be deployed around 433.92 MHz where local […] [Original post on infosec.exchange]

Radio Image Framing Protocol (RIFP) - test image (RLE)

038 8

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 27/07/2026

Pivotick is an open-source network graph library to facilitate pivoting. Version 1.4.0 has been released and also includes a security fix. Release notes github.com/Pivotick/Pivotick/releas… Documentation […] [Original post on infosec.exchange]

044 4

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 08/07/2026

We are exploring some ambitious ideas around reducing external dependencies and relying more on our own libraries across MISP and related tooling. Over the past year, we have been working on a replacement network graph library for the new MISP interface and […] [Original post on infosec.exchange]

031 3

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 08/07/2026

We started rulezet project after identifying a clear gap in open source tooling for detection rules management: the ability to operate synchronised instances while still allowing each organisation to maintain its own autonomous rule repository. Rulezet […] [Original post on infosec.exchange]

040 4

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 07/07/2026

Working on `tempolocus`, a tool that analyses time-series activity patterns to infer a user’s likely location. In @ail_project, we work with a large volume of social-network time series. Estimating users’ locations from these patterns is often a manual task […] [Original post on infosec.exchange]

031 3

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 05/07/2026

Looking at the current distributed.net statistics on the current RC5-72 brute force, this actually puts some key-size discussions into perspective. #cryptography #crypto #symmetric #cybersecurity

011 1

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 14/06/2026

cpe-editor v1.0.0 released : Establishing the Foundation for Collaborative CPE & PURL Mapping Release note - github.com/gcve-eu/cpe-editor/relea… Online version - cpe.gcve.eu #gcve #cpe #vulnerability #vulnerabilitymanagement #cve cvd

001 1

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 03/06/2026

Not sure I’m allowed to leak this yet, but the new MISP dashboard is kind of crazy. We didn’t just refresh the old one, we rewrote it completely, and it comes with a whole set of new features and capabilities that change the game quite a bit. #misp #cti #dashboard #opensource @misp

051 5

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 31/05/2026

I’m wondering why @dnsoarc is limiting potential new contributions to their project just because they are AI-assisted. Many valuable tools support development today, including code review and security review. The copyright argument feels similar to the one […] [Original post on infosec.exchange]

061 6

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 29/05/2026

The synthetic exercise world format now includes a nice map. So no one can blame us when you conduct an exercise: everything is fictional ;-) Yes, we’ve had cases like this during threat intelligence exercises. All Synthetic Exercise World - Self-contained […] [Original post on infosec.exchange]

031 3

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 27/05/2026

Yesterday, in our very warm office, an interesting discussion emerged: there was no dedicated taxonomy for evaluating Cyber Threat Intelligence (CTI) in MISP. So, we created one called: cti-evaluation 🔗 […] [Original post on infosec.exchange]

CTI Transmute - Graph Overview of a MISP-STIX conversion

031 3

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 25/05/2026

hack.lu is celebrating its 20th edition! There is still time to be part of this special anniversary edition: submit your talk, presentation, workshop, or even a short talk for the Call For Failures. Twenty editions of sharing, learning and community […] [Original post on infosec.exchange]

013 3

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 13/05/2026

This release includes a major new feature: a **graph visualisation for the MISP standard and STIX format** , making it easier to explore, understand, and present CTI data structures directly from JSON. CTI Transmute is an online service available at […] [Original post on infosec.exchange]

022 2

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 10/05/2026

The Synthetic Exercise World Format provides fictional countries, companies, sectors, and threat actors with structured metadata for neutral CTI examples, exercises, interoperability tests, and standards documentation without referencing real-world sensitive […] [Original post on infosec.exchange]

066 6

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 08/05/2026

This kernel vulnerability looks interesting to look at. crypto: caam - fix overflow on long hmac keys VLAI Severity -> High (confidence: 0.9638) vulnerability.circl.lu/vuln/CVE-202… #kernel #cybersecurity

Title
crypto: caam - fix overflow on long hmac keys
Summary
In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix overflow on long hmac keys When a key longer than block size is supplied, it is copied and then hashed into the real key. The memory allocated for the copy needs to be rounded to DMA cache alignment, as otherwise the hashed key may corrupt neighbouring memory. The copying is performed using kmemdup, however this leads to an overflow: reading more bytes (aligned_len - keylen) from the keylen source buffer. Fix this by replacing kmemdup with kmalloc, followed by memcpy.

000 0

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 24/04/2026

Some updates on the MISP Galaxy website: www.misp-galaxy.org/mitre-fraud-fra… It now includes a matrix-like view of the galaxy for @misp #misp #cti #threatintel #threatintelligence

010 1

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 21/04/2026

Security Intelligence Repository with RULEZET Building a Trusted Community for Detection Rules First workshop presented at @firstdotorg CTI 2026 in Munich 🔗 PDF […] [Original post on infosec.exchange]

Screenshot - Security Intelligence Repository with RULEZET

013 3

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 12/04/2026

Ransomlook 2.0 "Mira" Released - Observability, Crypto Traceability, and a Cleaner Core. Thanks to all the contributors who helped and worked on this release. A huge thanks to @F_kZ_ for his continuous commitment to make ransomlook always better […] [Original post on infosec.exchange]

022 2

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 11/04/2026

Excited to share that the MITRE Fight Fraud Framework™ (F3) is now included in the default MISP galaxy and available across all MISP instances. F3 is a curated knowledge base of tactics and techniques used by financial fraud actors, helping analysts […] [Original post on infosec.exchange]

xcited to share that the MITRE Fight Fraud Framework™ (F3) is now included in the default MISP galaxy and available across all MISP instances.

F3 is a curated knowledge base of tactics and techniques used by financial fraud actors, helping analysts structure, share, and enrich fraud-related intelligence more effectively.

A great step forward for the MISP community and for teams tracking financial fraud.

024 4

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 09/04/2026

New projects added for the hackathon of next week such as misp-ghidra and also bsimvis github.com/MISP/BSimVis BSimVis is a tool to upload large quantities of decompiled binaries from Ghidra to a redis/kvrocks server for analyzing similarity […] [Original post on infosec.exchange]

Screenshot of https://github.com/MISP/BSimVis

020 2

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 08/04/2026

Once again, an important standard is behind a paywall: prEN 4709-02 from CENELEC. It matters for both security and safety, and could benefit everyone, yet access remains restricted. @EUCommission do you plan to force CENELEC to publish and release publicly […] [Original post on infosec.exchange]

Again CENELEC limiting the use of their own standard...

000 0

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 07/04/2026

Working on a prototype for collaborative CPE editing, including relationship handling. It is starting to come together, and I see a lot of potential in extending the CPE format to make it more useful.” Maybe join me at hackathon.lu if you want to be part of […] [Original post on infosec.exchange]

000 0

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 06/04/2026

Just submitted - “GCVE Backstage: BCPs, Tooling, and Hackathon Opportunities” for hackathon.lu to show what can be done during the hackathon with the GCVE.eu project. If you want a voucher to join the hackathon, let me know. hackathon.lu @gcve […] [Original post on infosec.exchange]

000 0

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 03/04/2026

We are happy to announce the release of MISP v2.5.36, which includes new geolocation and map visualisation capabilities, the continued development of the Overmind UI, a new interactive CLI shell UI, important security fixes, and installer improvements […] [Original post on infosec.exchange]

MISP now supports rich geolocation visualisation for objects containing geographic data. When enabled, geolocation objects display an interactive map icon that renders coordinates on a tile-based map.

111 1

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 31/03/2026

If someone comes to me today preaching about “post-quantum” security issues, I’ll remind them of the current state of security: the npm ecosystem gets abused daily, CI pipelines run left and right with full access to cloud services, so-called security […] [Original post on infosec.exchange]

1411 11

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 17/03/2026

With the recent integration of CERT-VDE’s CSAF advisories, it becomes even clearer why diverse vulnerability data sources are essential. CSAF delivers direct vendor remediation information, and when correlated with the CVE Program , it highlights how […] [Original post on infosec.exchange]

010 1

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 14/03/2026

At the @cert_eu conference in 2025, @cryptosec an insightful presentation filled with many humorous references. One particularly interesting slide addressed bureaucracy in information security, why it exists and what it really represents. Those four points […] [Original post on infosec.exchange]

What is bureaucracy the name of ?
Heaviness and rigidity... it's a form of work organization
- A desperate attempt to bring certainty in a landscape of uncertainty
- Monopolisation of power
- Other's processes
- Another name for... lack of trust

TLP: CLEAR

000 0

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 14/03/2026

A new pull request for Vulnerability-Lookup adds a CSAF producer that publishes advisories for many manufacturers. This is great for defenders and researchers, as it increases the amount of detailed vulnerability information available. It will push the […] [Original post on infosec.exchange]

An overview of the current set of sources in the db.gcve.eu instance running the latest version of vulnerability-lookup. https://db.gcve.eu/recent#fstec

011 1

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 10/03/2026

Have You Ever Thought About Drones in MISP? To better support the documentation and analysis of drone-related incidents, several new resources have been integrated into MISP. #drone #drones #intelligence #misp #opensource #uavs #uav @misp 🔗 […] [Original post on infosec.exchange]

025 5

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 01/03/2026

Open Contributions Descriptor — or how to map your contribution in open source, open data, and open standards 🔗 Blog post www.foo.be/2026/03/open-contributio… #opensource #opendata #openstandard

Diagram of The Open Contributions Descriptor (OCD) is an open, machine-readable JSON format that allows an organization to publish a structured description of its participation in the open ecosystem.

023 3

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 24/02/2026

The Open Contributions Descriptor (OCD) is an open, machine-readable JSON format that allows an organization to publish a structured description of its participation in the open ecosystem. It's still a bit in flux but the goal of OCD is to make […] [Original post on infosec.exchange]

010 1

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 20/02/2026

The GCVE.eu initiative will take part in hackathon.lu (14–15 April, Luxembourg), alongside core developers of GCVE-related projects. See you there to build, experiment, and collaborate! #gcve #cve #opensource #openstandard #hackathon 🔗 hackathon.lu @gcve @circl

013 3