2026-09-06 (Sunday) Journal
Day summary: Today’s RSS activity: 3 item(s) from discourse.ossbase.org, infosec.exchange including “GCVE Lab - patch2vuln is a command-line tool that turns a git-format patch into a structured draft vulnerability advisory using a locally hosted Ollama model”; “Doing some statistics on the persistence of information published on security and threat intelligence blogs. A surprising number of the domains in the list below are NXDOMAIN nowadays.Don’t assume that security information and threat intelligence will remain accessible over time, especially when it is hosted by large private entities.Some are simply mistyped, while others reflect DNS changes over time that eventually left the original URLs broken.Stability and persistence of information is hard on Internet.#threatintelligence #threatintel #infosec #cybersecurity app.response.ncr.com blog.0x3a.com blog.anomali.com blog.cert.societegenerale.com blog.cylance.com blog.deniable.org blog.ioactive.com blog.jpcert.or.jp blog.kleissner.org blog.malwareclipboard.com blog.malwaretracker.com blog.passivetotal.org blog.safebit.mn blog.team-cymru.org blog.zimperium.com blogs.rsa.com cdn.securelist.com community.saas.hpe.com ddos.arbornetworks.com dnsdb.isc.org edu.arabsgate.com info.baesystemsdetica.com info.isightpartners.com insider.domaintools.com ioc.forensicartifacts.com iranthreats.github.i joedd.joesecurity.org lab.anchiva.com labs.alienvault.com labs.lastline.com labs.snort.org labsblog.f-secure.com luminosity.link malware.sekoia.fr morphick.net motherboard.vice.com ocelot.li permalink.gmane.org r.virscan.org remchp.com research.riskiq.net resources.infosecinstitute.com sandbox.deepviz.com sec.sexy securityblog.s21sec.com securityblog.switch.ch securitydaily.org sub0day.com tif.mcafee.com wepawet.iseclab.org www.cve.mitre.org www.cyintanalysis.com www.cyphort.com www.icebrg.io www.infosecdailynews.com www.isightpartners.com www.lexsi.com www.novetta.com www.packetmail.net www.root9b.com www.skycure.com www.threatexpert.com www.vxsecurity.sg”.
Hourly activity:
hour 00 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23
pulse . . . . . . . . . . . @ . . @ . . @ . . . . . .
count 00 00 00 00 00 00 00 00 00 00 00 01 00 00 01 00 00 01 00 00 00 00 00 00
GCVE Lab - patch2vuln is a command-line tool that turns a git-format patch into a structured draft vulnerability advisory using a locally hosted Ollama model
- Source:
discourse.ossbase.org - Time:
17:05:11 - Summary: https://discourse.ossbase.org#p-1523-associated-extension-1Associated extension https://discourse.ossbase.org#p-1523-gcve-bcp-05-x-02-patch-to-vulnerability-generation-provenance-2GCVE BCP-05-X-02: Patch-to-Vulnerability Generation Provenance Field Value Extension identifier
bcp-05-x-02Status Draft Version 1.0 Parent specification GCVE BCP-05 https://discourse.ossbase.org#p-1523-abstract-3Abstract This extension records provenance and analyst-review information produced when a software patch is transformed into vulnerability metadata. It makes the source patch, generator, model, assumptions, rationales, and draft status available to downstream GCVE consumers without adding a tool-specific extension…
GCVE Lab - patch2vuln is a command-line tool that turns a git-format patch into a structured draft vulnerability advisory using a locally hosted Ollama model
- Source:
discourse.ossbase.org - Time:
14:51:28 - Summary: https://discourse.ossbase.org#p-1522-patch2vuln-1patch2vuln
patch2vulnis a command-line tool that turns a git-format patch into a structured draft vulnerability advisory using a locally hosted Ollama model. It analyzes the patch, proposes a vulnerability title and description, CWE/CAPEC mappings and a CVSS v4.0 vector, then emits a CVE Record Format 5.2 JSON record with optional GCVE BCP-05 metadata. The generated record is intended as…
Doing some statistics on the persistence of information published on security and threat intelligence blogs. A surprising number of the domains in the list below are NXDOMAIN nowadays.Don’t assume that security information and threat intelligence will remain accessible over time, especially when it is hosted by large private entities.Some are simply mistyped, while others reflect DNS changes over time that eventually left the original URLs broken.Stability and persistence of information is hard on Internet.#threatintelligence #threatintel #infosec #cybersecurity app.response.ncr.com blog.0x3a.com blog.anomali.com blog.cert.societegenerale.com blog.cylance.com blog.deniable.org blog.ioactive.com blog.jpcert.or.jp blog.kleissner.org blog.malwareclipboard.com blog.malwaretracker.com blog.passivetotal.org blog.safebit.mn blog.team-cymru.org blog.zimperium.com blogs.rsa.com cdn.securelist.com community.saas.hpe.com ddos.arbornetworks.com dnsdb.isc.org edu.arabsgate.com info.baesystemsdetica.com info.isightpartners.com insider.domaintools.com ioc.forensicartifacts.com iranthreats.github.i joedd.joesecurity.org lab.anchiva.com labs.alienvault.com labs.lastline.com labs.snort.org labsblog.f-secure.com luminosity.link malware.sekoia.fr morphick.net motherboard.vice.com ocelot.li permalink.gmane.org r.virscan.org remchp.com research.riskiq.net resources.infosecinstitute.com sandbox.deepviz.com sec.sexy securityblog.s21sec.com securityblog.switch.ch securitydaily.org sub0day.com tif.mcafee.com wepawet.iseclab.org www.cve.mitre.org www.cyintanalysis.com www.cyphort.com www.icebrg.io www.infosecdailynews.com www.isightpartners.com www.lexsi.com www.novetta.com www.packetmail.net www.root9b.com www.skycure.com www.threatexpert.com www.vxsecurity.sg
- Source:
infosec.exchange - Time:
11:17:02 - Summary: Doing some statistics on the persistence of information published on security and threat intelligence blogs. A surprising number of the domains in the list below are NXDOMAIN nowadays. Don’t assume that security information and threat intelligence will remain accessible over time, especially when it is hosted by large private entities. Some are simply mistyped, while others reflect DNS changes over…