PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Project Black is now a CVE Numbering Authority (CNA)

projectblack.io | research | #vulnerability-management | #vulnerability-research | #vulnerability-disclosure | #announcement | #cve-program | #cna | #project-black
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Project Black has been authorised as a CVE Numbering Authority, letting it assign CVE IDs and publish CVE Records directly to reduce disclosure delays for vulnerabilities its researchers find.
Published
Collected

Related coverage

research · horizon3.ai
Product Updates from our CTO
The engineering team has been working tirelessly to improve the “what to wow” user experience, add more attack content, add indicators of best practices and…
vulnerability · projectblack.io
Vulnerability Disclosure Policy
Project Black's disclosure policy: vendors get up to 14 days of contact attempts and 90 days to remediate, with earlier public disclosure if a fix ships or active exploitation is observed.
blog · yeswehack.com
YesWeHack authorised as a CVE Numbering Authority (CNA)
YesWeHack has been authorised as a CVE Numbering Authority: it can now assign CVE IDs and publish CVE Records for vulnerabilities discovered through its Bug Bounty Programs.
blog · wiz.io
Increasing transparency in cloud security: Wiz is now a CVE Numbering Authority (CNA)
Wiz became a CVE Numbering Authority able to assign CVE IDs and disclose cloud vulnerabilities—the latest step after helping build the community cloud vulnerability database.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · bishopfox.com
Separating Signal from Slop: Triaging CVEs in the Age of AI Security Research
CVE disclosures are up 85% while exploitation barely moved. Bishop Fox breaks down four Nginx CVEs that looked critical but rarely affect real deployments.
Back