Infosec.Pub

4,699 readers
110 users here now

To support infosec.pub, please consider donating through one of the following services:

Paypal: jerry@infosec.exchange

Ko-Fi: https://ko-fi.com/infosecexchange

Patreon: https://www.patreon.com/infosecexchange

founded 2 years ago
ADMINS
1051
1052
1053
 
 

Maak: The infinitely extensible command runner, control plane and project automator à la Make (written in Guile Scheme - Lisp)

https://codeberg.org/jjba23/maak

Free yourself of repetitive, lacking, weird and arcane Makefile. After some weeks working on this project, I am upstreaming it to Guix so soon you all can enjoy.

https://codeberg.org/guix/guix/pulls/2132

Also, see here an advanced example of a Maak file: https://codeberg.org/jjba23/sss/src/branch/trunk/maak.scm

With the full power of Scheme (Guile) directly in your command runner/control plane, easily define functions, data, lists, loop through them, macros, etc.

Maak has as core mission being your control center or command plane, and act as a command runner, not necessarily a build system, so it avoids much of Make's complexity. No need for .PHONY recipes here.

Maak replaces the arcane syntax of Make with the power and elegance of a full-featured programming language: GNU Guile Scheme λ.

Instead of learning a limited DSL, you can leverage your existing Lisp skills to define tasks, manage data, and automate your workflows with ease. Define functions, manipulate lists, use conditional, create macros—the entire language is at your disposal.

You can also easily call external shell commands and integrate with your existing scripts and tools.

1054
 
 

Comments

1055
 
 

Everything's fine, the ad slinger assures us Cloud security vendor Zscaler says customers of Google’s Play Store have downloaded more than 19 million instances of malware-laden apps that evaded the web giant’s security scans.…

1056
 
 

Comments

1057
 
 

The National Institute of Standards and Technology (NIST) has officially released NIST Special Publication 800-232, establishing the Ascon family of algorithms as the new standard for lightweight cryptography designed specifically for resource-constrained devices.  Published in August 2025, this groundbreaking standard addresses critical security gaps in Internet of Things (IoT) devices, embedded systems, and low-power sensors […] The post NIST Publish ‘Lightweight Cryptography’ Standard To Protect IoT Devices appeared first on Cyber Security News.

1058
1059
 
 

The insurance industry is throwing some serious shade at GM right now. Relative to its numbers on the roads, the Camaro ZL1 had a whole-vehicle theft rate 39 times the average for all vehicles. […] On top of the high horsepower that makes the Camaro an attractive target, a technical glitch seems to have created … Continue reading Weak Keys on Camaro Muscle Car Make it Most Stolen Car in America →

1060
3
submitted 1 month ago by rss@ibbit.at to c/cardano
 
 
1061
1062
1063
 
 
1064
1065
 
 

We are excited to announce the release of Vulnerability-Lookup 2.15.0!
This version brings new features, performance improvements, and several bug fixes.

What's New

Detecting vulnerabilities known only through sightings

The dashboard now highlights vulnerabilities discovered via our sighting tools, including scraping social networks, MISP, Nuclei templates, Shadowserver, Gist, and more. This gives you better visibility of unpublished advisories.

Unpublished advisory - table

Unpublished advisory - list

Unpublished advisory - sightings

Batch user deletion for admins

Admins can now delete multiple users at once using checkboxes and a confirmation modal. CSRF protection is included to ensure safe operations.

Changes

  • Better logging
    We improved logging for access, warnings, and errors in the web app, including the HTTP status codes returned in unexpected situations.
    Issue #199
    Commits: a6b99bf, 9c37e7e, d2e826f

  • Faster vendor/product vulnerability searches
    The search page is now faster thanks to pipelines and pagination. A Bootstrap pagination component has been added when vendor and product are specified.
    Commit aeb6ae0

Search by vendor and product

  • New API option
    Added advisory_status parameter to the /sighting endpoint.
    Commit de5873c

  • Faster Organization/Product search
    The find_vulnerabilities function now finds matching vulnerabilities for all vendor/product combinations much faster.
    Commit 67d2516

  • Search page improvements
    We made several graphical and functional enhancements to the search page.
    Commits: 82c6f2d, 0f249d1, 94e53c0

  • About page improvements
    Better handling of GNAs and a link to the recent activity page.
    Commits: 70308f5, 168fcff

  • Dashboard updates
    Various improvements related to recently imported vulnerabilities and new filters in the "Evolution for the last month" table.

Recent - AHA!

Changelog

📂 For the full list of changes, check the GitHub release:
https://github.com/vulnerability-lookup/vulnerability-lookup/releases/tag/v2.15.0

🙏 A big thank you to all contributors and testers!

Feedback and Support

If you find any issues or have suggestions, please open a ticket on our GitHub repository:
https://github.com/vulnerability-lookup/vulnerability-lookup/issues/
We appreciate your feedback!

Follow Us on Fediverse/Mastodon

Stay updated on security advisories in real-time by following us on Mastodon:
https://social.circl.lu/@vulnerability_lookup/

1066
1067
 
 
1068
1069
1070
1071
1072
1073
1074
1075
view more: ‹ prev next ›