TechnicalAI glossary
CVE vulnerability
A unique public identifier (of the form CVE-year-number) assigned to a known security flaw, so that everyone is talking about the same one. It usually comes with a severity score out of 10 (the CVSS score) and coordinated disclosure: the vendor is warned first, giving it time to release a patch, before the details are made public.
In other words
The recall number for a faulty car model: manufacturer, garages and owners all know exactly which problem is meant.
Alyriaz articles that mention it
- A computer worm designed by a small team with the help of models
Researchers have shown that self-propagating malware could be designed by a small team assisted by models. We analyse what this change in scale implies, without technical detail.
- Can security research be dangerous?
A security research method has turned out to be directly usable as an attack tool. We examine the dual-use dilemma, the responses built by other disciplines, and what AI is missing.
- What is a CVE vulnerability, and how it gets reported
CVE, severity score, coordinated disclosure: here's what the security flaw vocabulary means, and what to do in practice when an alert concerns a tool you use.