Release 1.7.0

News

• The sign-up process now verifies that the user is not using a disposable email address,
  thanks to the MISP warning list of disposable emails. (177f6a9)
• Added a Flask command to update the local MISP Warning Lists. This function is triggered
  automatically when the Vulnerability Lookup instance is updated. (5370aa5)
• Implemented a mechanism to execute maintenance background jobs directly from the admin panel. (f36053b)
• Integration of the Exploit Prediction Scoring System (EPSS) score. (9e54b71, 27b4487, 2e021ed).
• A theme switcher button with two modes: light mode (default) and dark mode. (09ab04a, 2e12ddf)

Changes

• Enhanced the formatting of comments and bundle descriptions using JavaScript. (ddedfca)
• Admins are now notified when a new comment is awaiting moderation. (9739292)
• All admin views were improved with better search capabilities.

Fixes

• Make the GET List (with filters) for Bundles in the API case insensitive. (32c9bb4)
• The search form must post the search to /search and not search. (4ce5227)

Funding

The NGSOTI project is dedicated to training the next generation of Security Operation Center (SOC) operators, focusing on the human aspect of cybersecurity. It underscores the significance of providing SOC operators with the necessary skills and open-source tools to address challenges such as detection engineering, incident response, and threat intelligence analysis. Involving key partners such as CIRCL, Restena, Tenzir, and the University of Luxembourg, the project aims to establish a real operational infrastructure for practical training. This initiative integrates academic curricula with industry insights, offering hands-on experience in cyber ranges.

vulnerability-lookup is co-funded by CIRCL and by the European Union. Views and opinions expressed are however those of the author(s) only and do not necessarily reflect those of the European Union or ECCC. Neither the European Union nor the granting authority can be held responsible for them.