The Lab · 2026-04-06 18:27:14 · GitHub Issues
Fleet, the open-source host monitoring platform, is moving its vulnerability detection for Linux systems away from legacy OVAL feeds to the newer OSV (Open Source Vulnerabilities) format. This technical pivot is a direct response to a core flaw in the current system: OVAL feeds, particularly from Ubuntu, group multiple...
The Lab · 2026-04-09 21:27:19 · GitHub Issues
Aura's vulnerability scanning pipeline has a critical gap. The verification stage, defined in ADR-084, remains an unimplemented stub, leaving the system unable to automatically confirm if detected vulnerabilities are actually exploitable. The new plan is to bridge this gap by implementing sandbox-based proof-of-concept...
The Lab · 2026-04-15 19:23:03 · GitHub Issues
A critical alerting flaw in Wazuh's Syscollector module is causing a flood of false alarms, creating operational noise and potentially masking real threats. The issue manifests when an agent has multiple versions of the same software package installed, with only one containing a known vulnerability. In a documented cas...