# Jerry Gamblin Curiosity in Practice This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## RBP Tracker: Counting the CVE IDs the CVE List Cannot See DevFeed: [RBP Tracker: Counting the CVE IDs the CVE List Cannot See]() Original publisher: [Read original article]() Author: jgamblin Published: 2026-09-14T14:16:42Z Content type: article Language: en Sources: [Jerry Gamblin]() Topics: [data](), [NVD](), [API](), [GitHub]() Tags: [api](), [cve](), [cve-list](), [data](), [ids](), [list](), [nvd](), [report](), [scanner](), [source](), [state](), [uncategorized]() ### AI overview The article examines a corrected RogoLabs tracker for Reserved but Public CVE IDs. It explains that the CVE Services API returns 404 for reserved IDs, while a separate unauthenticated endpoint reveals their RESERVED state. The tracker lists IDs from public advisory feeds and describes how reserved records are absent from the bulk CVE List until publication. ### Source excerpt A new RogoLabs site lists Reserved but Public CVE IDs: 2,315 of them on September 14, drawn from 17 public advisory feeds, refreshed every six hours, and held a week before they appear. The first version of this tracker reported that none of the CVE IDs it found existed in the CVE List, in any ... Read more ## 10,501 Radios in Seven Days: What a $69 Badge Heard at Summer Camp DevFeed: [10,501 Radios in Seven Days: What a $69 Badge Heard at Summer Camp]() Original publisher: [Read original article]() Author: jgamblin Published: 2026-08-10T13:07:44Z Content type: article Language: en Sources: [Jerry Gamblin]() Topics: [Bluetooth](), [MicroPython](), [Hardware](), [Claude](), [Networks]() Tags: [black-hat](), [bluetooth](), [bsides](), [capture](), [claude](), [devices](), [hardware](), [micropython](), [networks](), [open](), [uncategorized]() ### AI overview A seven-day passive listening project using a Pimoroni Tufty 2350 examined WiFi and Bluetooth activity at BSides, Black Hat, and DEF CON. The article reports 4,653 access points and 5,848 Bluetooth devices, including 673 open networks and a beacon flooder that advertised 77 fake networks. It also explains why rotating addresses can inflate device counts and documents important limitations, including 2.4 GHz-only WiFi coverage. ### Source excerpt Seven days of passive listening at BSides, Black Hat and DEF CON: 673 open networks, one beacon flooder, and what it takes to count devices honestly. I have wanted to build one of these for a long time. A little screen on my bag that tells me what the air around me is actually made ... Read more ## Hydrate, Hack, Repeat: Security Summer Camp 2026 DevFeed: [Hydrate, Hack, Repeat: Security Summer Camp 2026]() Original publisher: [Read original article]() Author: jgamblin Published: 2026-07-22T21:34:54Z Content type: opinion Language: en Sources: [Jerry Gamblin]() Topics: [Security](), [vulnerability management](), [vulnerability](), [data](), [Artificial Intelligence]() Tags: [2026](), [ai](), [black-hat](), [bsides](), [cisa](), [con](), [cves](), [data](), [kev-catalog](), [management](), [models](), [research](), [security](), [talks](), [uncategorized](), [vulnerability](), [vulnerability-management]() ### AI overview A personal guide to the author's 2026 security conference schedule, new role as Head of Research at Empirical Security, and recommended CVE and vulnerability talks. It argues that effective vulnerability management requires granular, transparent, accurate data, citing the growth in CVEs and the limited share listed in CISA KEV. ### Source excerpt My schedule, a new role at Empirical Security, and the CVE and vulnerability talks worth your time. It is almost the first week of August, which means it is time to point myself at the desert one more time. BSides Las Vegas, Black Hat, and DEF CON all land back to back, and for me ... Read more ## CVE Mid-Year 2026 Check-In: Volume Vertical, Exploitation Rare DevFeed: [CVE Mid-Year 2026 Check-In: Volume Vertical, Exploitation Rare]() Original publisher: [Read original article]() Author: jgamblin Published: 2026-07-01T15:47:10Z Content type: article Language: en Sources: [Jerry Gamblin]() Topics: [Vulnerabilities](), [Security](), [Statistics](), [cisa]() Tags: [2026](), [comparison](), [cve](), [cves](), [report](), [security](), [statistics](), [uncategorized](), [vulnerabilities]() ### AI overview This mid-year review finds that 35,364 CVEs were published in the first half of 2026, up 49.5% from the same period in 2025, while only 85 had entered CISA's KEV list. The article argues that the main challenge is distinguishing exploitable vulnerabilities from the rapidly growing volume of disclosures. ### Source excerpt We are halfway through 2026, so it is time for the mid-year CVE check-in. The short version: the volume curve has gone vertical while exploitation has not. This review covers everything published in the first half of 2026 (Jan 1 - Jun 30, 2026), the volume, the severity, what is actually being exploited, and who ... Read more ## Good Data For Bad Golf DevFeed: [Good Data For Bad Golf]() Original publisher: [Read original article]() Author: jgamblin Published: 2026-05-13T14:05:06Z Content type: article Language: en Sources: [Jerry Gamblin]() Topics: [Python](), [CSV](), [GitHub Pages](), [GitHub Actions](), [Self-hosted]() Tags: [analytics-pipeline](), [csv](), [github-actions](), [github-pages](), [pipeline](), [python](), [self-hosted](), [uncategorized]() ### AI overview The article presents jgamblin/golf, a self-hosted Python analytics pipeline that converts Garmin Golf app CSV exports into a multi-page GitHub Pages dashboard. It describes features including session analysis, club-level consistency, session replay, gapping, coaching recommendations, and data-quality tracking, with deployment automated through GitHub Actions. ### Source excerpt I play golf. I am not good at golf. But I have a Garmin Approach R10 launch monitor, a Python interpreter, and too much free time, so naturally I spent way more time building a dashboard to analyze my swing data than I did actually swinging a club. The result is jgamblin/golf, a self-hosted analytics ... Read more ## Prioritizing What Matters: Bringing CVE Intelligence to Splunk DevFeed: [Prioritizing What Matters: Bringing CVE Intelligence to Splunk]() Original publisher: [Read original article]() Author: jgamblin Published: 2026-04-18T23:50:46Z Content type: release Language: en Sources: [Jerry Gamblin]() Topics: [Vulnerabilities](), [Security](), [dashboards](), [Open Source](), [configuration](), [cisa](), [FIRST]() Tags: [api](), [configuration](), [cve](), [dashboards](), [net](), [open-source](), [release](), [security](), [uncategorized](), [vulnerabilities](), [vulnerability]() ### AI overview An update to the free, open-source CVE Intelligence TA for Splunk adds EPSS, CISA KEV, and CISA SSVC enrichment to a vulnerability database. Version 2.0 includes a pre-joined Risk Priority lookup, four Dashboard Studio views, and automatic hourly updates without API keys or setup pages. ### Source excerpt I spend a significant amount of my time thinking about EPSS, CVSS, and the inherent gaps in how we prioritize vulnerabilities. We all know the drill: a 9.8 CRITICAL that remains unexploited shouldn't jump the line ahead of a 7.5 HIGH that is being actively used in the wild. Closing that gap between theoretical severity ... Read more ## 2025 CVE Data Review DevFeed: [2025 CVE Data Review]() Original publisher: [Read original article]() Author: jgamblin Published: 2026-01-01T18:38:43Z Content type: article Language: en Sources: [Jerry Gamblin]() Topics: [Vulnerabilities](), [data](), [Statistics](), [Security](), [Content Management System](), [Linux Kernel](), [web applications]() Tags: [2025](), [analysis](), [cms](), [cve](), [data](), [linux-kernel](), [patch-tuesday](), [report](), [statistics](), [supply-chain](), [trends](), [uncategorized](), [volume](), [vulnerabilities]() ### AI overview This review analyzes 2025 CVE publication data, reporting 48,185 published CVEs, a 20.6% increase from 2024. It highlights stable median CVSS scores, growth in web application and CMS-related flaws, publication clustering around vendor release cycles, and the Linux Kernel as the product with the most listed vulnerabilities. The article recommends prioritizing vulnerabilities by exploitability and automating remediation where possible. ### Source excerpt 2025 set a new baseline with 48,185 published CVEs. While the sheer volume is climbing, the median CVSS score remained surprisingly stable. We are seeing a distinct shift toward web application flaws (specifically in the CMS ecosystem) and a wider distribution of vendors, proving that vulnerabilities are spreading deeper into the supply chain. This massive growth ... Read more ## CNAScorecard.org Measures CVE Data Quality and Completeness DevFeed: [CNAScorecard.org Measures CVE Data Quality and Completeness]() Original publisher: [Read original article]() Author: jgamblin Published: 2025-08-14T00:43:12Z Content type: opinion Language: en Sources: [Jerry Gamblin]() Topics: [Data Quality](), [Vulnerabilities](), [NVD]() Tags: [alert-fatigue](), [cve](), [cve-data](), [data-quality](), [nvd](), [uncategorized](), [vulnerabilities]() ### AI overview The article introduces CNAScorecard.org, a public scorecard intended to measure the quality and completeness of CVE data supplied by CVE Numbering Authorities. It describes missing or incomplete weakness, product, severity, and fix information as a practical vulnerability-management problem, and connects the effort to the NVD backlog. ### Source excerpt I'm incredibly excited to finally share something I've been pouring my heart into at RogoLabs. For those of you who caught my talk at BSidesLV, you got a sneak peek, but today it's official: CNAScorecard.org is live! For years, the CVE program has been our shared language for identifying vulnerabilities. But lately, we've all felt ... Read more ## Jerry Gamblin Announces Two CVE Ecosystem Talks at BSides Las Vegas and DEF CON DevFeed: [Jerry Gamblin Announces Two CVE Ecosystem Talks at BSides Las Vegas and DEF CON]() Original publisher: [Read original article]() Author: jgamblin Published: 2025-07-30T18:05:00Z Content type: opinion Language: en Sources: [Jerry Gamblin]() Topics: [Security](), [vulnerability management](), [Open Source]() Tags: [black-hat](), [bsides](), [cves](), [infosec](), [management](), [open-source](), [security](), [uncategorized]() ### AI overview Jerry Gamblin announces that he will give two talks on the CVE ecosystem during Security Summer Camp, including appearances at BSides Las Vegas and the AppSec Village at DEF CON. ### Source excerpt It's that time of year again! The first week of August means my annual trip to the desert for "Security Summer Camp"--the whirlwind of BSides Las Vegas, Black Hat, and DEF CON. It's always an exhausting but amazing week, and I can't wait to dive in, catch up with everyone, and talk about what I've ... Read more ## 2024 CVE Data Review DevFeed: [2024 CVE Data Review]() Original publisher: [Read original article]() Author: jgamblin Published: 2025-01-05T00:04:57Z Content type: article Language: en Sources: [Jerry Gamblin]() Topics: [Statistics](), [data](), [Vulnerabilities](), [vulnerability](), [Protocol (disambiguation)](), [Cisco](), [iOS](), [GitHub](), [Kernel](), [WordPress](), [WordPress Plugins]() Tags: [cisco](), [cve](), [cve-data](), [github](), [kernel](), [numbers](), [open-source](), [packages](), [statistics](), [uncategorized](), [vulnerabilities](), [vulnerability](), [wordpress](), [wordpress-plugins]() ### AI overview This review examines 2024 CVE statistics, reporting 40,009 published CVEs, a 38.83% increase from 2023. It covers publication patterns, CVSS severity scores, CPE records, and CVE Numbering Authorities. ### Source excerpt 2024 brought unprecedented growth in CVE data, so I figured it would be appropriate to start the new year by exploring these statistics and highlighting some of the more intriguing data points. CVEs By The Numbers We ended 2024 with 40,009 published CVEs, up over 38% from the 28,818 CVEs published in 2023. CVEs By Month Month ... Read more