Skip to content

Commit

Permalink
chg: Minor changes.
Browse files Browse the repository at this point in the history
  • Loading branch information
cedricbonhomme committed Jan 23, 2025
1 parent 935efb9 commit 4c6103b
Show file tree
Hide file tree
Showing 2 changed files with 12 additions and 5 deletions.
15 changes: 11 additions & 4 deletions content/news/2025-01-22-shadowserver.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,12 +11,12 @@ tags:


We are glad to announce the immediate availability of vulnerability-related observations from
[The Shadowserver Foundation](https://www.shadowserver.org) within vulnerability-lookup.
[The Shadowserver Foundation](https://www.shadowserver.org) within Vulnerability-Lookup.

This milestone wouldnt have been possible without [Piotr Kijewski](https://www.linkedin.com/in/piotrkijewski/).
This milestone wouldn't have been possible without [Piotr Kijewski](https://www.linkedin.com/in/piotrkijewski/).
We developed a new sighting client, ShadowSight. This new client gathers vulnerability-related data directly from The Shadowserver Foundation, then reports the collected data to the Vulnerability-Lookup API as sightings.

ShadowSight leverages insights on common vulnerabilities and exploited vulnerabilities from Shadowserver’s honeypot source. Source code of ShadowSight is available:
ShadowSight leverages insights on common vulnerabilities and exploited vulnerabilities from Shadowserver's **honeypot source**. The source code of ShadowSight is available:

👉 https://github.com/CIRCL/ShadowSight

Expand All @@ -30,7 +30,8 @@ Explore our sightings collected from this source:

The Shadowserver Foundation remains a cornerstone resource for security researchers, providing an extensive wealth of data on real-world exploits and their associated vulnerabilities, complete with daily statistics and geographical insights.

Widely used by incident response teams, security researchers, analysts, and other cybersecurity professionals, Shadowserver is recognized as a highly credible and impactful project in the cybersecurity landscape. The Shadowserver Foundation delivers particularly valuable insights into security issues, including vulnerabilities in unpatched IoT devices, various types of internet-facing services, and even services that should not be exposed to the internet.
Widely used by incident response teams, security researchers, analysts, and other cybersecurity professionals, Shadowserver is recognized as a highly credible and impactful project in the cybersecurity landscape.
The Shadowserver Foundation delivers particularly valuable insights into security issues, including vulnerabilities in unpatched IoT devices, various types of internet-facing services, and even services that should not be exposed to the internet.

For us, it has quickly become a reliable sources for sightings. It's also a way to diversify our sources and improve situational awareness.

Expand All @@ -55,5 +56,11 @@ If you want to benefit from more features of Vulnerability-Lookup like sharing c
👉 https://vulnerability.circl.lu/user/signup


Example of sightings correlations with data from The Shadowserver Foundation:

![Sightings correlations](/images/news/2025/2025-01-22-sightings-correlations.png)


Another example of sightings from the Shadowserver Foundation (as we can see the type is *seen*):

![Sightings](/images/news/2025/2025-01-22-sightings.png)
2 changes: 1 addition & 1 deletion content/sources.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ toc: true
## Sources and Feeders

- [CISA Known](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) exploited vulnerability DB (via HTTP).
- NIST NVD CVE importer (via API 2.0), [Fraunhofer FKIE](https://github.com/fkie-cad/nvd-json-data-feeds) NVD.
- NIST NVD CVE importer (via API 2.0), and [Fraunhofer FKIE](https://github.com/fkie-cad/nvd-json-data-feeds) NVD.
- [CVEProject - cvelist](https://github.com/CVEProject/cvelist) (via git submodule repository).
- Cloud Security Alliance - [GSD-Database](https://github.com/cloudsecurityalliance/gsd-database/) (via git submodule repository).
- GitHub [Advisory Database](https://github.com/github/advisory-database) (via git submodule repository).
Expand Down

0 comments on commit 4c6103b

Please sign in to comment.