Remote

Cedric

@cedric@social.circl.lu

mastodon 4.5.18

Life long free software supporter.

@cedric@social.circl.lu:matrix.circl.lu on Matrix

cedric on libera.chat

PGP: 55F5 D60E EFCA 3591 0089 18E7 A1CB 94DE 57B7 A70D

107 Followers

119 Following

11 Posts

Joined November 23, 2022

Homepage:

https://www.cedricbonhomme.org

GitHub:

https://github.com/cedricbonhomme

Fosstodon:

https://fosstodon.org/@cedric

Vulnerability-Lookup:

https://vulnerability.circl.lu/user/cedric

Cedric @cedric@social.circl.lu

· 2mo ago

You can now browse VEX statements in Vulnerability-Lookup! The new VEX page lets you explore 220k+ vendor VEX records (Red Hat, Microsoft MSRC, more coming), filter by source, search by CVE ID or title, see product statuses at a glance (fixed, known affected, not affected, under investigation) and pivot straight to the related vulnerability. 🔎 https://vulnerability.circl.lu/vex/ 🧩 API: https://vulnerability.circl.lu/api/vex/ #VEX #VulnerabilityLookup #CVE #GCVE #OpenSource #CyberSecurity

vulnerability.circl.lu

Vulnerability-Lookup

Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.

Cedric @cedric@social.circl.lu

· 3mo ago

A new KEV Catalog built from real-world exploitation data ! https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/?sort=first_seen&catalog_uuid=c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8 We are excited to share the result of a fruitful collaboration with @shadowserver@infosec.exchange: a new Known Exploited Vulnerabilities (KEV) Catalog (BCP-07 compliant) built directly from their global honeypot telemetry. #ShadowServer #KEV #GCVE #Vulnerability #VulnerabilityManagement #Decentralization #Fragmentation

vulnerability.circl.lu

Vulnerability-Lookup

Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.

Cedric @cedric@social.circl.lu

· 6mo ago

VulnMCP can now leverage multiple skills to classify vulnerability descriptions written in English, Russian, or Chinese.

https://github.com/vulnerability-lookup/VulnMCP

#AI #Orchestration #NLP #MCP #VulnerabilityLookup #Vulnerability #CVE #GCVE #Agentic #Python #OpenSource #Transformers

github.com

Cedric @cedric@social.circl.lu

· 8mo ago

Exports matter to us. A lot. You’ve been warned 😉
Vulnerability-Lookup now supports KEV catalog export to NDJSON.

#OpenData #KEV #CVE #GCVE #Vulnerability #OpenSource #CyberSecurity

Cedric @cedric@social.circl.lu

· 9mo ago

Status from @vulnerability_lookup@social.circl.lu are now posted as unlisted in order to not overload the public timeline.

We recently made a couple of improvements related to the content of the posts, with the inclusion of the VLAI score (https://arxiv.org/abs/2507.03607)

Follow the bot in order to get vulnerability related news:
@vulnerability_lookup@social.circl.lu

Alternatively, you can create an account (https://vulnerability.circl.lu) and configure email alerts (based on vendor/product criteria).

#VLAI #Vulnerability #CVE

arxiv.org

Cedric @cedric@social.circl.lu

· 5mo ago

CIRCL AI approach at the International Committee of the Red Cross (ICRC)

https://www.vulnerability-lookup.org/2026/04/29/icrc-circl-ai-approaches-in-practice/

#AI #OpenSource #Vulnerabilitymanagement #RedCross #ICRC

vulnerability-lookup.org

CIRCL AI approach at the International Committee of the Red Cross (ICRC)

On April 28, 2026, we had the opportunity to present the CIRCL AI approach at the International Committee of the Red Cross (ICRC). The session took place in Luxembourg, with remote participation from the Delegation for Cyberspace at the Global Cyber Hub in Geneva. The objective of this event was practical: show how AI can be used as an operational capability in vulnerability intelligence, not just as a research topic. We focused on production workflows that help analysts deliver faster, more con

Cedric @cedric@social.circl.lu

· 6mo ago

Critical RCE Vulnerability reported in Windchill.

https://vulnerability.circl.lu/vuln/GCVE-1-2026-0021

Improper Control of Generation of Code ('Code Injection') vulnerability in windchill FlexPLM, Windchill PDMLink.This issue affects FlexPLM: through 13.0.3.0; PDMLink: through 13.0.3.0.

#RCE #Vulnerability #CyberSecurity #Windchill #FlexPLM

vulnerability.circl.lu

Cedric @cedric@social.circl.lu

· 7mo ago

@reiayanami@aus.social 😂

Cedric @cedric@social.circl.lu

· 5mo ago

A Vulnerability-Lookup sighting client for Google's Tsunami Security Scanner plugin repository:

https://github.com/vulnerability-lookup/TsunamiSight

#vulnerability #vulnerabilityLookup #Sightings #Tsunami #Google #OpenSource

github.com

Cedric @cedric@social.circl.lu

· 5mo ago

🚀 ML-Gateway 1.0.0 is out!

First stable release, focused on production readiness:

• Per-worker LRU cache to avoid redundant inference
• Efficient multi-core serving with `gunicorn --preload` (shared model memory, faster startup behavior)
• Cleaner model registry (removed broken entries)

Designed to handle concurrent workloads without wasting memory or cycles.

🔗 https://github.com/vulnerability-lookup/ML-Gateway

#AI #Python #NLP #OpenSource #Vulnerabiity #MCP

github.com

Cedric @cedric@social.circl.lu

· 2mo ago

282,000+ VEX records are now in Vulnerability-Lookup 🎉 🔎 https://vulnerability.circl.lu/vex SUSE just joined Red Hat and Microsoft as a VEX source — so from any CVE you can see whether a vendor says a product is affected, fixed, or not affected. VEX statements are attached directly to each vulnerability and available via the open API. 🧑‍💻 https://github.com/vulnerability-lookup/vulnerability-lookup #VEX #CSAF #VulnerabilityManagement #OpenSource #InfoSec #GCVE #CVE #CYberSecurity #Vulnerability

vulnerability.circl.lu

Vulnerability-Lookup

Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.