Thank you Brittany Day, Linux Security for your insightful coverage of #VulnCon25!
This article highlights critical developments in vulnerability management including metadata improvements, supply chain security measures, EU Cyber Resilience Act impacts and emerging security baseline standards.
Read more: https://go.first.org/zeokh
Thank you Kevin Poireault, Infosecurity Magazine for covering #VulnCon25!
The article provides valuable insights into the NVD updates shared by NIST at the event.
It's encouraging to see the progress being made with improved processing rates and exploration of new automation approaches to address the scale of existing and emerging CVEs.
Read the full article to learn about NVD's latest initiatives including their gap-filling strategy, AI-powered tools and other improvements to their #VulnerabilityManagement infrastructure: https://go.first.org/bP57I
Thank you so much to everyone who attended the #CWE talks at the #VulnCon25 conference!!!
We’re already looking forward to next year’s event!
The final day of #VulnCon25 has been extraordinary. Standout moments included:
- CISA and NIST Collaboration: Talks on "Managing Coordinated Disclosures" and "Software Identity in the Vulnerability Management Ecosystem" highlighted best practices and the evolving role of identity in securing systems
- FedRAMP Insights: Sessions explored compliance strategies and emerging regulations, connecting security with operational requirements
- Resolution Revolution: Adobe demonstrated how to streamline security ticket resolution by leveraging AI and integrating knowledge from company, product, and expert insights
- AI Vulnerabilities Unpacked: Workshops like "Identifying and Assigning AI Model Vulnerabilities" addressed challenges in securing AI systems, offering actionable solutions
As we conclude this event, we thank all speakers, attendees, and organizers for making this gathering a success!
CWE Program
FIRST.org
Carlos Mogas da Silva
CVE Program