Blog post · October 27, 2026 · kb.cert.org
VU#701544: mpc-lib Hardened Derivation Fails to Protect Ancestor Isolation
- About VU
- Also names Document
- Fireblocks
- IDS
- index
- ONE
- Read the original
What this article record gives an agent
The original is on kb.cert.org. This record adds what an agent needs to use it: a short summary it can quote, the companies resolved to their records, and a clear line back to the source.
A summary it can quote
Our short summary, marked as ours, separate from the publisher's own words and byline.
Companies, resolved
Who the article is about and who it names, each linked to a company record, not just a name in text.
The source, kept
The original URL, publisher and date, and what kind of piece it is (press release, news, analysis).
Get this article
The same record, three ways in. No key needed to try it.
MCP
curl -X POST https://mcp.decisioninsights.ai/api/mcp-public \
-H "content-type: application/json" \
-H "accept: application/json, text/event-stream" \
-d '{"id":1,"jsonrpc":"2.0","method":"tools/call","params":{"arguments":{"uuid":"c18ef8fe-42fb-4c1e-a26a-a572d8569223"},"name":"di_get_content"}}'REST
GET https://api.decisioninsights.ai/api/public/v1/content/c18ef8fe-42fb-4c1e-a26a-a572d8569223How an agent can check this article before citing it
| The check | What the record shows | Where it is in the data |
|---|---|---|
| There is an original | kb.cert.org, October 27, 2026 | isBasedOn |
| The companies are real | VU, Document, Fireblocks, IDS, index and ONE, each a record of its own | about, mentions |
| Whose words are whose | Summary by Decision Insights; the original keeps its own byline | author, publisher |
View the raw record (JSON-LD)
[
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/#website",
"@type": "WebSite",
"name": "Decision Insights",
"potentialAction": {
"@type": "SearchAction",
"target": {
"@type": "EntryPoint",
"urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
}
},
"publisher": {
"@id": "https://decisioninsights.ai/#organization"
},
"url": "https://decisioninsights.ai"
},
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/#organization",
"@type": "Organization",
"contactPoint": {
"@type": "ContactPoint",
"contactType": "customer support",
"email": "[email protected]"
},
"description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
"legalName": "Wiretap Labs, LLC",
"logo": {
"@type": "ImageObject",
"url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
},
"name": "Decision Insights",
"parentOrganization": {
"@type": "Organization",
"name": "Wiretap Labs",
"sameAs": [
"https://www.linkedin.com/company/wiretap-labs",
"https://www.crunchbase.com/organization/wiretap-labs"
],
"url": "https://wiretaplabs.com"
},
"publishingPrinciples": "https://decisioninsights.ai/standards/",
"sameAs": [
"https://www.linkedin.com/company/decisioninsights"
],
"url": "https://decisioninsights.ai"
},
{
"@context": "https://schema.org",
"@type": "BreadcrumbList",
"itemListElement": [
{
"@type": "ListItem",
"item": "https://decisioninsights.ai",
"name": "Decision Insights",
"position": 1
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/records/",
"name": "Records",
"position": 2
},
{
"@type": "ListItem",
"item": "https://decisioninsights.ai/vu701544-mpc-lib-hardened-derivation-fails-to-protect-ancestor-isolation/",
"name": "VU#701544: mpc-lib Hardened Derivation Fails to Protect Ancestor Isolation",
"position": 3
}
]
},
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/vu701544-mpc-lib-hardened-derivation-fails-to-protect-ancestor-isolation/#blogposting",
"@type": "BlogPosting",
"about": {
"@id": "https://decisioninsights.ai/registry/fireblocks/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/fireblocks/",
"name": "Fireblocks"
},
"audience": [
{
"@type": "Audience",
"additionalType": "Seniority",
"audienceType": "Analyst"
},
{
"@type": "Audience",
"additionalType": "Job function",
"audienceType": "Cybersecurity / Security Analyst"
},
{
"@type": "Audience",
"additionalType": "Persona",
"audienceType": "Security Operations Practitioner"
},
{
"@type": "Audience",
"additionalType": "Buyer role",
"audienceType": "Architect / Technical Evaluator"
},
{
"@type": "Audience",
"additionalType": "Adoption curve",
"audienceType": "Early Majority"
},
{
"@type": "Audience",
"additionalType": "Technology maturity",
"audienceType": "Established Technology"
},
{
"@type": "Audience",
"additionalType": "Industry",
"audienceType": "Information Technology / Cybersecurity / Identity Security / Machine Identity & Certificate Lifecycle Management"
}
],
"author": {
"@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
"@type": "Person",
"name": "Decision Insights Threat Desk",
"url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
},
"dateModified": "2026-10-26T19:47:51-06:00",
"datePublished": "2026-10-26T19:47:41-06:00",
"description": "Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing…",
"headline": "VU#701544: mpc-lib Hardened Derivation Fails to Protect Ancestor Isolation",
"isBasedOn": {
"@type": "CreativeWork",
"author": {
"@type": "Person",
"name": "Alexander Curtis and Alex Lewis"
},
"sourceOrganization": {
"@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
"name": "Department of Homeland Security"
},
"url": "https://kb.cert.org/vuls/id/701544"
},
"keywords": [
"Vulnerabilities"
],
"mainEntityOfPage": {
"@id": "https://decisioninsights.ai/vu701544-mpc-lib-hardened-derivation-fails-to-protect-ancestor-isolation/",
"@type": "WebPage",
"sdDatePublished": "2026-10-27",
"sdPublisher": {
"@id": "https://decisioninsights.ai/#organization"
}
},
"mentions": [
{
"@id": "https://decisioninsights.ai/registry/brittonetwork/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/brittonetwork/",
"name": "Document"
},
{
"@id": "https://decisioninsights.ai/registry/fireblocks/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/fireblocks/",
"name": "Fireblocks"
},
{
"@id": "https://decisioninsights.ai/registry/ids/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/ids/",
"name": "IDS"
},
{
"@id": "https://decisioninsights.ai/registry/vivecom/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/vivecom/",
"name": "index"
},
{
"@id": "https://decisioninsights.ai/registry/onesoftware/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/onesoftware/",
"name": "ONE"
},
{
"@id": "https://decisioninsights.ai/registry/vu/#organization",
"@type": "Organization",
"mainEntityOfPage": "https://decisioninsights.ai/registry/vu/",
"name": "VU"
}
],
"publisher": {
"@id": "https://decisioninsights.ai/#organization"
}
},
{
"@context": "https://schema.org",
"@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
"@type": "Person",
"description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
"name": "Decision Insights Threat Desk",
"sameAs": [
"https://www.linkedin.com/showcase/decisioninsights/"
],
"url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
}
]