Mark Atkinson

CRITICAL VULNERABILITY ALERT CISA has highlighted a critical security vulnerability - CVE-2025-5086, CVSS 9.0 - impacting Dassault Systèmes DELMIA Apriso Manufacturing Operations Management (MOM) software. According to Dassault, the issue impacts versions from Release 2020 through Release 2025. Information for this vulnerability can be found on SecAlerts: CVE-2025-5086, CVSS 9.0: https://lnkd.in/gBRUAAbw #ciso #cio #cto #vulnerabilities #cybersecurity #secalerts #msp #mssp #dassault #CVE20255086 https://lnkd.in/ga29CFy4

2

Body Cameras BREAK INTO AZ Corrections. Deep insight on how @Axon BWCs change outcomes, provide improved security & even help recruiting. MUST WATCH as DOCs rarely let you inside the walls for exclusive coverage. https://lnkd.in/gS_EedYE

62

2 Comments

Great work Brian—spot-on clarification. Critical for CBOM/PKI profiles: FIPS 203 (ML-KEM) for key establishment, FIPS 204 (ML-DSA) for signatures, HQC as diversity KEM. Submission names like Kyber/Dilithium don't belong in policy docs. Architecture teams get this wrong daily

1

1 Comment

cpe-guesser 2.0 released - Multi-Source CPE Imports, Better Ranking, and Greater Autonomy Beyond NVD Version 2.0 brings major improvements to CPE import, ranking, and CVE v5 data handling. This release focuses on better import performance, broader format support, improved search relevance, and more robust indexing for vendor and product matching. A notable change in this release is that cpe-guesser is no longer limited to NVD as its only practical CPE source. In addition to the NVD feeds, it can also leverage the Vulnerability-Lookup dump available at https://lnkd.in/dX_7DbK3, providing additional CPE sources and more autonomy from the previously NVD-only source model. This release lays an important foundation for improving the GCVE ecosystem, especially by strengthening vendor and product references through better CPE source diversity, indexing, and matching capabilities. If you have ideas for further improvements, additional data sources, or better ways to refine vendor and product identification, we would be very happy to hear your feedback. https://lnkd.in/d5Sku8qj #opensource #gcve #cve #vulnerabilitymanagement #cybersecurity GCVE-EU CIRCL (Computer Incident Response Center Luxembourg)

48

5 Comments

Free Guide! The EASY Roadmap to NIST & CMMC Compliance for Engineers and Architects Learn how AEC firms simplify compliance, reduce risk, and stay competitive before security gaps cost you contracts. ⬇️ Download in the comments #AECIndustry #CyberCompliance #CMMC

Small disclosure. Big target. CISA flagged vulnerabilities in EVMAPA charging station management software (https://lnkd.in/gNeNuyCd). Three CVEs that could allow remote command execution and status manipulation. I keep coming back to the charging infrastructure angle. We talk about grid security like it's theoretical. But charging stations are physical assets with digital brains, sitting in parking lots and highway stops across the country. An attacker who can spoof charging station statuses creates interesting problems. Fleet managers making decisions on bad data. Drivers stranded with vehicles that won't charge. Commercial operations grinding to a halt because the charging network looks functional when it's not. The advisory doesn't specify which charging networks use EVMAPA. That gap bothers me. We're asking facility managers and fleet operators to secure infrastructure they might not even know they have. Electric vehicle adoption accelerated faster than our security frameworks could keep pace. Now we're patching vulnerabilities in systems that didn't exist five years ago but handle critical operations today. Still working through what this means for physical site security when the charging infrastructure becomes unreliable. #GreyShield #CriticalInfrastructure #OTSecurity #Security #ThreatIntel

1