Josh Bressers

@josh.bressers.name

410 Followers 474 Following

Mostly on Mastodon - VP of Security at Anchore - Open Source Security https://opensourcesecurity.io - Hacker History http://hackerhistory.com - He/Him

A graph of CVE data from 2025, it shows the top orgs assigning CVE IDS (called CNAs). The wordpress plugin focused CNAs are a gigantic number of IDs
"the what" meme captioned AMD believes exploiting the disclosed vulnerability requires an attacker either having physical access to the system, operating system kernel access on a system with unlocked memory modules, or installing a customized, malicious BIOS
A graph showing the growth of CVE IDs by year, 2021-2024. 2024 is clearly ahead
A graph of open source packages, It's pretty impressive growth, there are now over 10 million open source packages tracked by Ecosyste.ms
CVE IDs for 2023 and 2024 The two 2024 lines are all CVES (the top line) and with Wordpress Plugin Bug Bounty CNAs removed (the middle line) Those bug bounty programs (3 of them) account for a huge amount of CVE growth
The drake yes meme captioned with "Argue with trolls" and "Block the trolls"
A Heltec V3 connected to a raspberry pi zero using GPIO
A graph of CVEs for 2024, 2023, 2022, and 2021 But the kernel CVE IDs are removed for 2024
A graph of CVE data for the years 2024, 2023, 2022, and 2021