seen from Japan
seen from Türkiye
seen from China
seen from United States
seen from United States
seen from Russia
seen from Maldives
seen from Kazakhstan
seen from United States
seen from Malaysia
seen from Australia
seen from China
seen from Switzerland
seen from United Kingdom
seen from United States
seen from Japan
seen from Switzerland
seen from United States
seen from United Kingdom
seen from Switzerland
Miggo, KEV, and FUD; They Still Don't Get It
[If the name ‘Miggo’ is familiar to you in the context of my blogging, you are thinking about one I wrote titled “Miggo Security’s AI Slop & Potential Trademark Infringement” in July, 2025. That was more around ‘corporate’ culture and bad lawyering. This blog is different, pointing out how they don’t seem to understand KEV at all.] On November 18, 2025, Miggo published a report titled “Missing…
Bob's "CVE Quality-by-Design Manifesto" - The Hit and Misses
Almost every time Bob Lord blogs, I feel the need to write a rebuttal to what is arguably abject stupidity and shortsightedness. One he published a couple days ago, titled “CVE Quality-by-Design Manifesto“, is missing several core concepts in the realm of vulnerability intelligence. While his overall point is certainly valid, the order in which he declares our needs is wrong, on top of missing…
Miggo Security's AI Slop & Potential Trademark Infringement
Before you publish your end-of-year vulnerability statistics...
Before you publish your end-of-year vulnerability statistics…
TL;DR – The CVE dataset does not allow you to determine how many vulnerabilities were disclosed in 2017. I’ll try to keep this fairly short and to the point, but who am I kidding? Every year for a decade or more, we see the same thing over and over: companies that do not track or aggregate vulnerabilities decide to do their own review and analysis of disclosures for the prior year. Invariably,…
View On WordPress
