agh42 / cve-news-search

Monitor news and social media for CVE mentions.

cve-news-search

Monitor news and social media for CVE mentions. cve-news-search is part of CSTOOL.io.

Features

• This command line tool first uses Bing News API to search for news entries.
• It then goes on to scrape each found article for mentions of CVE IDs.
• It uses cveservice to store all found articles and correlate them with the CVE database.

Setup

• Configure basic settings using environment variables or a .env file. Use the DOTenv file in the /bin folder as template.
• You will need an Azure Cognitive Services API key to perform searches. Their free tier allows up to 3.000 search requests per month.
• Some settings can also be changed on the command line. Execute bin/newsquery -h to review available parameters:

usage: newsquery.py [-h] [--lang LANG] [--region REGION]
                    [--freshness FRESHNESS] [--search SEARCH]

Search and store news items mentioning CVE IDs.

optional arguments:
  -h, --help            show this help message and exit
  --lang LANG           A language supported by Bing News Search
  --region REGION       A region supported by Bing News Search
  --freshness FRESHNESS
                        Week or Month
  --search SEARCH       The search term (default: "CVE vulnerability")