<![CDATA[CISA fired most of the people who were helping report KEVs so now they expect us to do it for them.]]>CISA fired most of the people who were helping report KEVs so now they expect us to do it for them. Nope.

Access Denied

favicon

(www.cisa.gov)

]]>https://board.circlewithadot.net/topic/3527ae80-5cc5-4877-b0ab-0b6a34c55403/cisa-fired-most-of-the-people-who-were-helping-report-kevs-so-now-they-expect-us-to-do-it-for-them.RSS for NodeMon, 25 May 2026 16:57:23 GMTThu, 21 May 2026 15:04:33 GMT60<![CDATA[Reply to CISA fired most of the people who were helping report KEVs so now they expect us to do it for them. on Thu, 21 May 2026 20:35:10 GMT]]>@cR0w Lol WordPress needs a lot of care from people with much more web coding skill than me... That shit if you dont set it up right is so easy to compromise regardless of your skill level. Have had a few people use me for security testing in hopes to save a buck on cybersecurity for their sites and they all got pwned by basic holes in under 5 minutes lol. Also abused a WordPress language switcher glitch and one dumb authentication bug to log out the admin of JINR's (Russian version of CERN) public facing web site server 4 years ago from the comfort of a college dorm laundry room using nothing but my cell phone without even being actually logged in to her account in any way. As for the failed attempt at gov bug bounty, my god that was a fully custom stack fuckmess full of terrible security decisions and they simply got lucky that I couldn't quite get shit to report but someone more skilled at web specific stuff than me could likely find a way in lol.

]]>https://board.circlewithadot.net/post/https://ioc.exchange/ap/users/116596538263481113/statuses/116614477285193779https://board.circlewithadot.net/post/https://ioc.exchange/ap/users/116596538263481113/statuses/116614477285193779Thu, 21 May 2026 20:35:10 GMT<![CDATA[Reply to CISA fired most of the people who were helping report KEVs so now they expect us to do it for them. on Thu, 21 May 2026 16:14:43 GMT]]>@ABT1181 Good old contractors. And now look how much is Wordpress.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116613453160705336https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116613453160705336Thu, 21 May 2026 16:14:43 GMT<![CDATA[Reply to CISA fired most of the people who were helping report KEVs so now they expect us to do it for them. on Thu, 21 May 2026 16:09:16 GMT]]>@cR0w LOL US gov infosec is a fucking joke. A few years ago tried to do something for a government HackerOne bounty and even with web hacking being the weakling of my hacking skills (far better and more specialized in DRM reverse engineering, for example) I *nearly* broke into the external access portal of a pretty spicy government system that was within the bounty scope lmao. I did manage to get the page to profusely misbehave on command too. No bounty of course but yeah.... Still showed it was sketchy as hell they were IIRC like one step or server setting away from having to probably paying out 5 figures for a severe vuln report.

]]>https://board.circlewithadot.net/post/https://ioc.exchange/ap/users/116596538263481113/statuses/116613431737554284https://board.circlewithadot.net/post/https://ioc.exchange/ap/users/116596538263481113/statuses/116613431737554284Thu, 21 May 2026 16:09:16 GMT<![CDATA[Reply to CISA fired most of the people who were helping report KEVs so now they expect us to do it for them. on Thu, 21 May 2026 15:47:20 GMT]]>@nyanbinary That's way too much work.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116613345500636723https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116613345500636723Thu, 21 May 2026 15:47:20 GMT<![CDATA[Reply to CISA fired most of the people who were helping report KEVs so now they expect us to do it for them. on Thu, 21 May 2026 15:43:32 GMT]]>@cR0w you know, ... whispers "gayint gcna"

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/nyanbinary/statuses/116613330524508723https://board.circlewithadot.net/post/https://infosec.exchange/users/nyanbinary/statuses/116613330524508723Thu, 21 May 2026 15:43:32 GMT<![CDATA[Reply to CISA fired most of the people who were helping report KEVs so now they expect us to do it for them. on Thu, 21 May 2026 15:11:20 GMT]]>Even worse, they don't even host the report form. It's through Qualtrics.

CISA KEV Nomination Form

This form allows external users to submit a Common Vulnerabilities and Exposures (CVE) entry for consideration to be added to the Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV) Catalog. The KEV Catalog highlights vulnerabilities that are actively exploited and pose significant risk to organizations. By nominating a CVE, you help CISA identify and prioritize vulnerabilities that require urgent attention and remediation across critical infrastructure and enterprise environments.

favicon

(cisasurvey.gov1.qualtrics.com)

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116613203901479791https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116613203901479791Thu, 21 May 2026 15:11:20 GMT<![CDATA[Reply to CISA fired most of the people who were helping report KEVs so now they expect us to do it for them. on Thu, 21 May 2026 15:07:08 GMT]]>@h2onolan These are wild times.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116613187435185257https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116613187435185257Thu, 21 May 2026 15:07:08 GMT<![CDATA[Reply to CISA fired most of the people who were helping report KEVs so now they expect us to do it for them. on Thu, 21 May 2026 15:06:18 GMT]]>@cR0w imagine gathering the goodwill from an entire community and then setting it on fire.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/h2onolan/statuses/116613184100574200https://board.circlewithadot.net/post/https://infosec.exchange/users/h2onolan/statuses/116613184100574200Thu, 21 May 2026 15:06:18 GMT