iiinova — where your digital self keeps evolving

iiinova is part of the Atmosphere — an open, public network where you own your identity.

Alexandre Dulaunoy

@adulau.infosec.exchange.ap.brid.gy

142 followers 13 following 398 posts

Enjoy when humans are using machines in unexpected ways. I break stuff and I do stuff. The other side is at @a (photography, art and free software at large) […] 🌉 bridged from ⁂ infosec.exchange/@adulau, follow @ap.brid.gy to interact

Posts Replies Media

Reposted by Alexandre Dulaunoy

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 14/09/2026

hack.lu 2026 agenda is live! (the 20th Edition) including more details about the keynote. 🔗 2026.hack.lu/blog/hack.lu-2026-agen… #conference #hacklu #cybersecurity

hack.lu 2026 agenda is live! (the 20th Edition)

We are happy to announce that the hack.lu 2026 agenda is now published!

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 14/09/2026

hack.lu 2026 agenda is live! (the 20th Edition) including more details about the keynote. 🔗 2026.hack.lu/blog/hack.lu-2026-agen… #conference #hacklu #cybersecurity

hack.lu 2026 agenda is live! (the 20th Edition)

We are happy to announce that the hack.lu 2026 agenda is now published!

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 16/10/2026

GCVE BCP-02 v1.9: Making Coordinated Vulnerability Disclosure Open, Accessible, and Practical for Everyone The GCVE initiative has published version 1.9 of GCVE BCP-02 . Practical Guide to Vulnerability Handling and Disclosure, introducing significant […] [Original post on infosec.exchange]

GCVE - BCP-02 updated

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 13/10/2026

Working on a new release of the CPE editor for @gcve which is the crowd-sourced way to handle and improve CPE records for CVE records or any vulnerability format using CPE. Now there is an nice visualisation of the relationships between vendors/products […] [Original post on infosec.exchange]

Explore approved relationships and the records in the combined view. Arrows follow the source → target direction; dashed links show ownership. The outlined node is the current record.

Drag nodes to arrange them, scroll to zoom, and drag the background to pan. Select a node or use the record picker to inspect it.

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 12/10/2026

I just pushed a new misp-module to support PTR classification on hostname and IP addresses in MISP. 🔗 MISP modules available www.misp-project.org/modules 🖇️ ptrclassify library github.com/adulau/ptrclassify @misp #cti #threatintel #threatintelligence #cybersecurity

Expansion on a MISP event using the ptrclassify misp-module.

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 10/10/2026

The Radio Image Framing Protocol (RIFP) is an experimental, extensible standard for sending images over low-rate radio links. I did a new version 1.1 with an extension to authenticate the images. The extension is now published as an Internet-Draft. #rifp […] [Original post on infosec.exchange]

The Radio Image Framing Protocol (RIFP) is an experimental, extensible standard for sending images over low-rate radio links. I did a new version 1.1 with an extension to authenticate the images. The extension is now published as an Internet-Draft.

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 09/10/2026

Rulezet and its ecosystem: how detection rules travel between tools. Vulnerability-Lookup, AIL, Flowintel, MISP, Velociraptor and more: every tool that reads from Rulezet or receives its rules, what each connection does, and an interactive map of the whole […] [Original post on infosec.exchange]

Rulezet and its ecosystem: how detection rules travel between tools

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 07/10/2026

There seems to be a remarkably strong correlation on LinkedIn between people warning about the PQC threat and job titles containing “Account Manager” or “Sales”. I’m sure it’s purely coincidental. #pqc #cybersecurity #postquantumcryptography

Reposted by Alexandre Dulaunoy

Alexandre Dulaunoy @a.paperbay.org.ap.brid.gy · 05/10/2026

A question for fellow open-source maintainers: Imagine someone uses AI to redevelop your tool in Rust. The result barely works, but they reuse your project’s name and repeatedly jump into discussions about the existing project to promote their version. How would you handle that? I’m usually a […]

Original post on paperbay.org

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 05/10/2026

We are pleased to announce the publication of GCVE BCP-07 version 3.0, extending the Known Exploited Vulnerability (KEV) Assertion Format with support for No Known Exploitable Vulnerability (NKEV) assessments. BCP-07 was initially designed to provide a structured, open and federated way to […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 04/10/2026

Threat-Actor explorer v1.1.0 released with many improvements and upgrade to the latest Pivotick library Latest A standalone, browser-only HTML/JavaScript application for exploring the MISP threat-actor galaxy, UUID-based relationships across every cluster […] [Original post on infosec.exchange]

Overview of the Threat-Actor explorer.

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 04/10/2026

We did some improvements in GCVE extension - GCVE BCP-05-X-03 - Vulnerability Handling and Disclosure Timeline. We also review the alignment and interoperability with CSAF 2.1. Now there is a new object field `entities` to represent the entities in the […] [Original post on infosec.exchange]

We also review the alignment and interoperability with CSAF 2.1. GCVE X-03

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 01/10/2026

GCVE BCP-05-X-03: Bringing Vulnerability Handling Timelines into Vulnerability Records. Vulnerability records usually provide a good description of what a vulnerability is, which products are affected, how severe it may be, and where additional information […] [Original post on infosec.exchange]

GCVE BCP-05-X-03 - Vulnerability Handling and Disclosure Timeline. Overview.

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 30/09/2026

"Dual-fit imperative in security leadership: a grounded theory investigation of CISO role enactment in modern organisations." The thesis has a complete survey with some interesting answers from a small set of CISCO. Now the conclusion/recommendation seems a bit broad and very generic imho. 🔗 […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 29/09/2026

The new AI conglomerates are publishing documents warning about the dangers of semi-open models that defenders can actually use, while those same conglomerates are restricting defenders’ access to their own models. #ai #cybersecurity 🔗🤦 […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 28/09/2026

We were very happy to participate in Vulnopticon 2026 and to meet so many people interested in vulnerability identification, publication, coordination, and management. The discussions during the conference and just as importantly, the conversations around and outside the formal sessions brought […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 23/09/2026

The **GCVE Workshop at Vulnopticon 2026** took place on 22 September in Luxembourg. We discussed decentralized vulnerability allocation, digital sovereignty, CVD workflows, Vulnerability-Lookup, Vulniverse, AI-assisted vulnerability analysis, and the future of GCVE. All slide decks and […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 20/09/2026

VULNARCHIVE and GNA 1988: Automated Vulnerability Identifier Allocation in a Federated GCVE Ecosystem. One of the core ideas behind GCVE is that vulnerability identification does not need to depend on a single central authority. Independent GCVE Numbering Authorities (GNAs) can operate their […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 18/09/2026

Tired of drafting vulnerability advisories from Git patches? We developed patch2vuln to facilitate the creation of security advisories directly from Git patches. With a single command, patch2vuln can assist an analyst throughout the advisory creation process: analyzing the patch, drafting the […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 15/09/2026

Pivotick v2.0.0 has been released. Pull more graph out of wherever your data lives, and you choose what lands. History is the way back out of anything that does. Actually you can update, pivot graph and review. This release also includes many new other features […]

infosec.exchange

Original post on infosec.exchange

Reposted by Alexandre Dulaunoy

Anne Applebaum @anneapplebaum.wsocial.eu · 14/09/2026

Your regular reminder: If the Russians stop fighting, the war ends. If the Ukrainians stop fighting, their land will be occupied, their leaders will be killed, their history and language will be erased, their children will be kidnapped to serve Russia.

5943728913401 37.3K

Reposted by Alexandre Dulaunoy

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 02/09/2026

GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference We are pleased to announce a GCVE workshop on 22 September 2026, from 14:00 to 18:00, hosted at the CIRCL/LHC offices in Luxembourg, just before the VulnOpticon conference. The workshop is free and […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 02/09/2026

GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference We are pleased to announce a GCVE workshop on 22 September 2026, from 14:00 to 18:00, hosted at the CIRCL/LHC offices in Luxembourg, just before the VulnOpticon conference. The workshop is free and […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 11/09/2026

I love to see clever use of the @gcve ecosystem and @SaschaRommelfangen did a cool GNA which is automatically creating GCVE records and structured security advisories from full-disclosure mailing-list or alike: 🔗 Project details vuln.freearchive.org 🔗 As it's a GNA, it's part of the […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 11/09/2026

We had difficulties automatically classifying chats, messaging channels, and forums. So we tested several open-weight large language models for our use case. The benchmark is published below, along with a tool supporting the classification process. This helps us avoid manually classifying […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 09/09/2026

The @gcve BCP-07 KEV format has been updated to allow the `Withdrawn` and `Reasserted` KEV Assertions. This allows to support case like CVE-2026-69836 . 🔗 gcve.eu/bcp/gcve-bcp-07/#withdrawn-… #cve #gcve #kev […] [Original post on infosec.exchange]

GCVE BCP-07 - Withdrawn and Reasserted KEV Assertions

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 06/09/2026

Doing some statistics on the persistence of information published on security and threat intelligence blogs. A surprising number of the domains in the list below are NXDOMAIN nowadays. Don't assume that security information and threat intelligence will remain accessible over time, especially […]

infosec.exchange

Original post on infosec.exchange

Reposted by Alexandre Dulaunoy

Tim (Wadhwa-)Brown :donor: @timb.me.uk · 05/09/2026

Interesting Git repos of the week: Bugs: * github.com/MSNightmare/FalconFlank - everyone's favourite new source of 0day pops CrowdStrike Falcon * github.com/MSNightmare/HardBreacher - everyone's favourite new source of 0day pops Kaspersky AV Hard hacks: * […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 04/09/2026

ptrclassify is a small, dependency-free Python library and CLI that infers likely IP usage and location from reverse-DNS PTR hostnames. Version 0.3 released including new rules and CSV tool. #ptrclassify #infosec #cybersecurity 🔗 github.com/adulau/ptrclassify

GitHub - adulau/ptrclassify: ptrclassify is a small, dependency-free Python library and CLI that infers likely IP usage and location from reverse-DNS PTR hostnames

ptrclassify is a small, dependency-free Python library and CLI that infers likely IP usage and location from reverse-DNS PTR hostnames - adulau/ptrclassify

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 03/09/2026

Proposed changes in the CVE program CNA document "Update 4.2.6 from SHOULD to MUST: "CNAs MUST assign different CVE IDs to separate Vulnerabilities"" 🔗 github.com/CVEProject/cve-documents… #cve #vulnerabilitymanagement #cybersecurity

Reposted by Alexandre Dulaunoy

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 01/09/2026

GCVE BCP-07, the Known Exploited Vulnerability (KEV) Assertion Format, has been updated to version 2.2. A key addition is the formalisation of the GCVE KEV Directory, a simple machine-readable directory allowing organisations to announce where their KEV catalogues and exploitation assertions are […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 01/09/2026

GCVE BCP-07, the Known Exploited Vulnerability (KEV) Assertion Format, has been updated to version 2.2. A key addition is the formalisation of the GCVE KEV Directory, a simple machine-readable directory allowing organisations to announce where their KEV catalogues and exploitation assertions are […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 31/08/2026

CVSS and WRONG models are just the same. #cvss #infosec

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 24/08/2026

I spent many hours in vulnogram today and to be honest. I'm glad that a colleague started to work on a replacement called `vulniverse`. Still early beta but it's promising. #opensource #vulniverse #cybersecurity #cve #gcve :github: work in progress […]

infosec.exchange

Original post on infosec.exchange

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 23/08/2026

I just released `ptrclassify` is a small, dependency-free Python library and CLI that infers likely IP usage from reverse-DNS PTR hostnames. It is intentionally heuristic and multi-label. PTR naming is operator-controlled and is not authoritative evidence of how an address is actually used. The […]

infosec.exchange

Original post on infosec.exchange

Reposted by Alexandre Dulaunoy

Alexandre Dulaunoy @a.paperbay.org.ap.brid.gy · 22/08/2026

endless hope, Belgium 2026 #photography #photo #river #water #leica

endless hope, Belgium 2026

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 18/08/2026

CCWget is a lightweight Python client for searching and retrieving archived web objects from a CIRCL Common Crawl indexing service. @Thanat0s did a pretty cool tool to search the Common Crawl. The service is quite resource intensive but if you are a security researcher, you could get access […]

infosec.exchange

Original post on infosec.exchange

Reposted by Alexandre Dulaunoy

Stephen Shaffer @t0sche.infosec.exchange.ap.brid.gy · 17/08/2026

RE: infosec.exchange/@adulau/1170761984… Couldn’t have imagined a better way for this idea to be picked up and implemented. #Kudos to @circl, @adulau, and @cedric 👏🫶

Reposted by Alexandre Dulaunoy

Alexandre Dulaunoy @a.paperbay.org.ap.brid.gy · 15/08/2026

How mature is this repository? My long quest for open-source software metrics When I discover an open-source software project for the first time, how can I estimate whether it is mature, healthy and usable? I just released OSSTRL - Open Source Software Technology Readiness Level to help me […]

Original post on paperbay.org

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 13/08/2026

If you are curious about (nearly) everything we did the past months at the GCVE.eu initiative: gcve.eu/2026/08/13/gcve-recent-acti… We published a recap blog post. #gcve #cve #vulnerability […] [Original post on infosec.exchange]

GCVE recent activities: standards, software and a growing GNA community

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 12/08/2026

vulnerability-lookup 6.0 will be released this week with many (really, many!) new features. One of the smaller, but important, additions is support for multiple SSVC views alongside CVSS. When SSVC information is available from an ADP (such as CISA) , or […] [Original post on infosec.exchange]

vulnerability-lookup 6.0 will be released this week with many (really, many!) new features.

One of the smaller, but important, additions is support for multiple SSVC views alongside CVSS. When SSVC information is available from an ADP (such as CISA) , or from additional sources such as GCVE, it is now displayed by default.

This allows users to more easily compare the different severity and prioritization assessments associated with a vulnerability.

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 11/08/2026

From a research paper to running open-source code in just a few days. We (with @cedric) have been experimenting in Vulnerability-Lookup with the concept of Local Exploit Hazard, based on the recent research paper “Modeling Local Exploit Hazard — A Bayesian […] [Original post on infosec.exchange]

Implementation of the paper in vulnerability-lookup

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 09/08/2026

Working on a first super beta implementation of @gcve BCP-11 "Community-Proposed Updates to Existing CVE Records" To validate if the BCP-11 can be published. #cve #gcve #vulnerability #opensource #opendata Discussions […] [Original post on infosec.exchange]

BCP-11 first implementation UI - to propose changes to existing CVE records.

BCP-11 first implementation UI - to propose changes to existing CVE records.

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 09/08/2026

Pretty cool idea from @nyanbinary - a bot to analyse fucked up references from the CVE records. @fuckeduprefs_bot Maybe we could imagine an archive bot at the same time to ensure that the references don't get lost. Just like archive.org or similar. Maybe something for @gcve to look into. #cve […]

infosec.exchange

Original post on infosec.exchange

Reposted by Alexandre Dulaunoy

Alexandre Dulaunoy @a.paperbay.org.ap.brid.gy · 08/08/2026

Maybe the AI bots trying to find endlessly new content on my blog post? Drive me these questions « Is human generated content what AI bot are only interesting in? Does this mean that human contribution is the only way to keep the system running before it collapse or read its peak? Is the AI […]

Original post on paperbay.org

Reposted by Alexandre Dulaunoy

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 28/07/2026

The Radio Image Framing Protocol (RIFP) 1.0 is an experimental, extensible standard for sending images over low-rate radio links. The default rifp-cpfsk-4800 profile uses binary continuous-phase FSK and can be deployed around 433.92 MHz where local […] [Original post on infosec.exchange]

Radio Image Framing Protocol (RIFP) - test image (RLE)

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 06/08/2026

Recommendations on Naming Threat Actors. The MISP standard has been updated including the new tracking of naming origin from security vendor. #cti #threatintelligence #soc #cybersecurity #threatintel 🔗 www.misp-standard.org/rfc/threat-ac…

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 04/08/2026

MISP Galaxy Threat Actor Explorer v1.0.0 released github.com/adulau/threat-actor-expl… #cti #cybersecurity #misp #threatintelligence #threatintel @misp

GitHub - adulau/threat-actor-explorer: A Threat-Actor explorer (browser-local) from the MISP galaxy dataset

A Threat-Actor explorer (browser-local) from the MISP galaxy dataset - adulau/threat-actor-explorer

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 03/08/2026

A standalone, browser-only HTML/JavaScript application for exploring the MISP threat-actor galaxy, UUID-based relationships across every cluster in the MISP Galaxy repository, and shared MISP Galaxy metadata. Graph rendering is performed by Pivotick. Source […] [Original post on infosec.exchange]

A Threat-Actor explorer (browser-local) from the MISP galaxy dataset.

Selection of the producer to limit the view to a specific vendor-naming.

A standalone, browser-only HTML/JavaScript application for exploring the MISP threat-actor galaxy, UUID-based relationships across every cluster in the MISP Galaxy repository, and shared MISP Galaxy metadata. Graph rendering is performed by Pivotick.

Alexandre Dulaunoy @adulau.infosec.exchange.ap.brid.gy · 03/08/2026

Have you seen any evidence of the famous « collect encrypt data and decrypt later » in incident response ? Until now, I haven’t. #pqc #crypto #cryptography #dfir