Catch Shelby Cunningham on stage at CVE/FIRST VulnCon 2026 in Scottsdale, Arizona.

Her panel, “Supply Chains and Malware Campaigns: Is CVE the Right Way to Name the Game?”, examines whether CVE is the right tool for tracking open-source supply chain compromises — from isolated package incidents to large-scale campaigns affecting hundreds of packages.

Date: April 16, 2026 | 1:15–2:15 PM MST (UTC-7)

Learn more: https://www.first.org/conference/vulncon26/program#pSupply-Chains-and-Malware-Campaigns-Is-CVE-the-Right-Way-to-Name-the-Game