Matthieu Garin

Hackers, Scrapers & Fakers: What's Really Inside the Latest LinkedIn Dataset I like to think of investigating data breaches as a sort of scientific search for truth. You start out with a theory (a set of data coming from an alleged source), but you don't have a vested interest...

Une très bonne analyse du dernier scrap LinkedIn 2023 a la mode : t.co/lV6PeISFYx

🖼 Check out this excellent #Mindmap of #Cybersecurity and #Privacy in #Europe 🇪🇺 Thanks Andrey Prozorov, this is a #MustRead - I love it! lnkd.in/eYmxK57f

➡️ Strategies, regulations, protection of classified information, publications, tools ... this is very comprehensive #NIS2 #DORA #CRA #GDPR👍

1️⃣ Nomenclature to identify combinations of Base (#CVSS_B), Base + Threat (#CVSS_BT), Base + Environmental (#CVSS_BE)👍
2️⃣ Additional extrinsic attributes of a vuln: Safety ☠️, Automatable, Recovery, Value Density, Vulnerability Response Effort, Provider Urgency
3️⃣ Additional focus on #OT/#ICS/#Safety

🚨 This is big news: the #FIRST just published its long-awaited #CVSS version 4.0, the next generation of the Common Vuln Scoring System standard📚 Quite a lot of modifications! ;-) lnkd.in/eV_kbjuH

I particularly like the new scores for wormability🔥, recovery, vuln response effort and vendor urgency