First #CISA, now the Swedish Armed Forces: Officials start to understand why we all need #encryption
Let's keep fighting for #privacy đź’Ş
👉 tuta.com/blog/swedish-armed-fo…
First the US agency CISA, now the Swedish Armed Forces: Officials start to understand the importance of encryption in the face of increased tension and surveillance.Tuta
Apparently #CISA has rated #curl #vulnerability #CVE_2024_11053 as #CVSS v3 Base Score 9.1 "critical". This is wrong, and will lead to automation triggering unnecessary warnings and blocking use of perfectly fine systems until an update is installed (which can take months). nvd.nist.gov/vuln/detail/CVE-2…
Edit: In case you wonder my credentials for judging this: I found this vulnerability.
Edit2: This appears to be originating from CISA: cve.org/Media/News/item/blog/2…
Edit3: The score has now been fixed. Commit: github.com/cisagov/vulnrichmen…
A repo to conduct vulnerability enrichment. Contribute to cisagov/vulnrichment development by creating an account on GitHub.GitHub
I wrote a guest post on the Rust Foundation blog on my experience attending the #CISA Open Source Software Security Summit:
foundation.rust-lang.org/news/…
The Rust Foundation is an independent non-profit organization to steward the Rust programming language and ecosystem, with a unique focus on supporting the set of maintainers that govern and develop the project.foundation.rust-lang.org
