Today in being forced to use LLMs because "vulnerability" disclosures have been produced by them:

no version numbers or git revisions anywhere
the reports are malformed markdown which has then been filed into a jira ticket which doesn't accept markdown anyway
Many of the CVSS scores look like: "CVSS:3.1/AV/AC:L/..." where it should be "AV:L", but the bot, which again only knows statistically what a CVSS score looks like, is generating gibberish.
the diffs for "suggested fixes" have been generated by something that doesn't actually know anything about how diffs are formed, either in terms of process or meaningfully in structure:
they're missing file names, line numbers, and function names
all leading whitespace, including after "-" or "+" line markers, is missing
in some of the diffs, hyphens (especially for delete lines) are just missing? But sometimes "--" has been combined to "—"

I want my money back.

If you're using Ubuntu, Julian Klode wrote a post about the upcoming Secure Boot certification expiry here: https://discourse.ubuntu.com/t/microsoft-uefi-ca-rotation-what-it-means-for-ubuntu-users-and-vendors/82652

Steve McIntyre wrote up a page for Debian about the upcoming Secure Boot certificate expiration here: https://wiki.debian.org/SecureBoot/CAChanges , and he's also started a list of systems with known broken firmware here: https://wiki.debian.org/SecureBoot/BuggyFirmware . Much thanks to Steve!

If anyone has been wondering about the upcoming Secure Boot certificate expiration and how it relates to RHEL, we've written some stuff up about it here: https://www.redhat.com/en/blog/expiration-secure-boot-signing-certificates-2026

So, uh, can we criminalize dropping 0days on github without doing /any/ coordinated disclosure yet?

If any of yall need to know more about how UEFI is going to adapt to Post-Quantum Crypto, there's a whitepaper about proposed spec changes here: https://uefi.org/sites/default/files/resources/UEFI_PQC_Update_Whitepaper_Final.pdf
and some folks are giving a talk about it tomorrow here: https://www.brighttalk.com/webcast/18206/665348