Draugnet is a lightweight, open-source tool for anonymous cyber threat reporting. Built for the MISP ecosystem, it lets users submit and track reports — no accounts, no logins, just a simple token. Supports plain text, MISP JSON, and object templates. ideal for CSIRTs, ISACs, and trusted communities. Built for anonymity Easy MISP integration .

version 1.2.0 released with RTIR, Flowintel and Ollama integration.

Source code: https://github.com/draugnet/draugnet
Online version: https://draugnet.circl.lu/
Release notes: https://github.com/draugnet/draugnet/releases/tag/v1.2.0

#dfir #csirt #flowintel #cybersecurity #threatintel #opensource

@circl @misp

We are excited to announce the release of Vulnerability-Lookup 2.15.0!

This version brings new features, performance improvements, and several bug fixes.

Thanks to @cedric for the hard work.

#vulnerability #vulnerabilitymanagement #opensource #csirt #cybersecurity

https://www.vulnerability-lookup.org/2025/08/22/vulnerability-lookup-2-15-0/

@circl @gcve

The Suguru Yamaguchi Fellowship supports #CSIRT teams with national responsibility to connect at the FIRST annual conference.

Applications for #FIRSTCON26 are now open through October 15.

Learn more: https://go.first.org/HboLn

#CERTEU
#ENISA
#CSIRT
#vulnerability

https://cert.europa.eu/blog/sharepoint-vulnerabilities-joint-statement

CIRCL Virtual Summer School - VSS 2025 A Look Back at Our Successful Virtual Summer School! Videos Are Now Available.

https://www.circl.lu/pub/press/20250721/

Curious about all the open source and projects developed by @circl ?

CIRCL Open Source tools powering SOC & CSIRT teams.

#opensource #cybersecurity #soc #csirt #threatintel #threatintelligence

https://hdoc.cnw.circl.lu/JJKFoeHrS9Wf28L4tAyCNg?view#

This is a timely reminder to ensure any third-parties with access to your systems follow the same cyber policies you'd expect your internal staff to follow.

#ScatteredSpider are particularly good at #SocialEngineering their way via a third-party to other victims.

For clarity, #ScatteredSpider are considered the initial access group, #DragonForce #ransomware is the malware deployed once #ScatteredSpider are inside your network.

https://www.bleepingcomputer.com/news/security/mands-confirms-social-engineering-led-to-massive-ransomware-attack/

CIRCL - Coordinated Vulnerability Disclosure (CVD) Policy

An updated coordinated vulnerability disclosure policy has been published including a new service to report online vulnerabilities.

#cvd #vulnerabilitymanagement #vulnerability #csirt #cert #nis2 #cybersecurity

https://circl.lu/pub/coordinated-vulnerability-disclosure/

Start der European-Vulnerability-Database (EUVD)

#CSIRT #CVE #CVENumberingAuthority #Cybersecurity #Cybersicherheit #ENISA #EuropeanVulnerabilityDatabase #EUVD #NIS2 #Schwachstelle #SchwachstellenDatenbank #Schwachstellenmanagement #ThreatIntelligence #Vulnerability

https://netzpalaver.de/2025/05/18/start-der-european-vulnerability-database-euvd/

Over 22 real contributions and project outcomes came out of our two-day hackathon in Luxembourg, truly impressive work! The collaboration and energy were next-level.

Glad to share that we'll also be hosting a smaller hackathon at @firstdotorg’s annual conference in Copenhagen on Sunday 22nd June . See you there! #Hackathon #FIRSTcon25

#hackathon #opensource #csirt #cybersecurity

hackathon.lu 2025 - Outcome and results details https://hackathon.lu/2025/04/11/hackathon.lu-2025-outcome/

hackathon at FIRSTCON25 https://discourse.ossbase.org/c/hackathon-firstcon25/

A dedicated fediverse account has been created to follow the hackathon topics

@hackathonfirstcon25

@ddu and @gallypette will also coordinate the hackathon with me.

We are excited to announce that CIRCL has three open positions available.

As a team strongly oriented towards open-source development, we value contributions that drive innovation and strengthen the cybersecurity community. These roles are open to EU citizens, with the workplace based in Luxembourg. If you’re passionate about cybersecurity and open-source collaboration, we encourage you to apply and make a meaningful impact.

• CIRCL - Software Engineer and Intelligence Analyst (software-engineering-analyst)

https://www.circl.lu/projects/position/software-engineering-analyst/

• CIRCL - Security Analyst and Researcher (Security-Analyst-and-Researcher)

https://www.circl.lu/projects/position/security-analyst-researcher/

• CIRCL - Incident and Vulnerability Disclosure Coordinator/Analyst (nis2-incident-analyst)

https://www.circl.lu/projects/position/nis2-incident-analyst/

@circl

FIRST hosted another successful TF-CSIRT Meeting & FIRST Regional Symposium Europe in beautiful Monte Carlo, Monaco this month, co-organized by TF-CSIRT and hosted by CERT Monaco.

The event brought together incident response experts for intensive training, informative sessions and valuable networking opportunities, fostering collaboration within the global cybersecurity community.

Special thanks to FIRST CEO Chris Gibson and our Board of Directors who attended: Dr. Serge Droz, Carlos Leonardo, Michael Hausding, Olivier Caleff, Carlos Alvarez, Mona Elisabeth Østvang, Nadia Yousef, Tracy Bills, Yukako Uchida and Audrey Mnisi Mireku.

Learn more about the event here: https://go.first.org/J5Lnf

#FIRSTEU25 #cybersecurity
#IncidentResponse #CSIRT

One thing's clear: if you send an abuse notification to NiceNIC, it ends up being really 'nice' for the criminals.

This reminded me of an idea for proxy filtering: filtering based on the domain registrar. Another practical use case for the WHOIS history database.

Is there an open and public list of the worst registrars?

TR-89 - Guidelines for Notifying CSIRT/CERT of Red Teaming and Penetration Testing Exercises - Enhancing Detection and Coordination

https://www.circl.lu/pub/tr-89/

#csirt #redteaming #cert cybersecurity

FIRST is proud to have partnered on a new guide for policymakers: 'Digital First Responders - The Role of CSIRTs in Developing Countries'

A collaboration with The World Bank, including expert review from AfricaCERT, NRD & World Bank specialists.

Download free: https://zurl.co/AruG

#CSIRT #CyberSecurity
#infosec #security

We're glad announce the release of Flowintel v1.2.0, a powerful and flexible case management tool written in Python! This version brings key enhancements to boost efficiency and streamline workflows, with new features like MISP-objects support, subtasks, and significant UI updates.

@misp

https://github.com/flowintel/flowintel/releases/tag/1.2.0

From Ruins to Resilience: How Developing and Utilizing Open Source Solutions Enhances CSIRT Capabilities

#csirt #cert #opensource #infosec

Blog post https://www.foo.be/2024/10/How_Developing_and_Utilizing_Open_Source_Solutions_Enhances_CSIRT_Capabilities