OctoSQL & Vulnerability Data

OctoSQL is a neat tool to query files in different formats using SQL. This can, for example, be used to query the JSON vulnerability files from CISA or NVD and create interesting joins between different files.

https://isc.sans.edu/diary/OctoSQL+Vulnerability+Data/32026

Mirai vs. Wazuh

The Mirai botnet has now been observed exploiting a vulnerability in the open-source EDR tool Wazuh.

https://www.akamai.com/blog/security-research/botnets-flaw-mirai-spreads-through-wazuh-vulnerability

DNS4EU

The European Union created its own public recursive resolver to offer a public resolver compliant with European privacy laws. This resolver is currently operated by ENISA, but the intent is to have a commercial entity operate and support it by a commercial entity.

https://www.joindns4.eu/

WordPress FAIR Package Manager

Recent legal issues around different WordPress-related entities have made it more difficult to maintain diverse sources of WordPress plugins. With WordPress plugins usually being responsible for many of the security issues, the Linux Foundation has come forward to support the FAIR Package Manager, a tool intended to simplify the management of WordPress packages.

https://github.com/fairpm