• Public

  • Public
  • Network
  • Groups
  • Featured
  • Popular
  • People

phrase -- actual meaning "0-Day" -- a recently identified and properly disclosed vulnerability, usually with an already assigned CVE ID "sophisticated attack" -- somebody got phished "exploitation is trivial" -- ...assuming specific prerequisites, like e.g., being able to change a configuration file, guessing a 128-bit UUID, or hoping non-default settings are combined in an illogical manner "which we have named <terrible pun>" -- we really, really hope this name takes off even though it's a very narrowly scoped vulnerability, that would be so cool "nation state attacker" -- off-the-shelf vuln scanner traffic from China and/or a country we couldn't place without consulting a map "we have developed a tool to detect..." -- here's a shell script running "find / -type f -name ..." "RCE can't be ruled out" -- we tried to achieve remote code execution, but couldn't "we're releasing this information in the hope that it will help others" -- we want to preempt somebody else publishing this information before us "OSINT" -- github dorking "we take the security and privacy of our customers seriously" -- whoops