Researchers and PSIRTs Working Well Together
We Speak CVE3 Mai 2022

Researchers and PSIRTs Working Well Together

Shannon Sabens of CrowdStrike and Milind Kulkarni of a NVIDIA discuss what security researchers should expect when reporting vulnerabilities to a Product Security Incident Response Team (PSIRT); how to best to collaborate with them; how to interpret responses from the PSIRT; how to get the best outcome when making a report; supported versus end-of-life (EOL) products; CVE Numbering Authority (CNA) scopes; timing of a patch versus the publication of a CVE Record; and more.

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(22)

CVE Record Disputes Explained

CVE Record Disputes Explained

In this episode of the “We Speak CVE” podcast, MITRE’s CVE and CWE Project Lead Alec Summers chats with Yves Younan of Cisco, Alex Kreilein of Qualys, Pedro Sampaio of Red Hat, and Anthony Singleton o...

24 Mar 30min

The CVE Consumer Working Group (CWG)

The CVE Consumer Working Group (CWG)

“We Speak CVE” podcast host Shannon Sabens chats with CVE Consumer Working Group (CWG) co-chairs, Jay Jacobs and Bob Lord, and CVE™ Project Lead Alec Summers, about how the CWG was created to address ...

14 Okt 202520min

Mapping the Root Causes of CVEs

Mapping the Root Causes of CVEs

“We Speak CVE” podcast host Shannon Sabens chats with CVE™/CWE™ Project Lead Alec Summers and CWE Top 25 task lead/CWE Root Causes Mapping Working Group lead Connor Mullaly about the importance of map...

5 Aug 202523min

25 Years of CVE and What’s Next

25 Years of CVE and What’s Next

Host Shannon Sabens speaks with fellow CVE Board members Kent Landfield and Madison Oliver and CVE Program Lead Alec Summers about the 25th anniversary of the CVE Program. Topics include the history o...

4 Feb 202547min

CNA Onboarding Process Myths Versus Facts

CNA Onboarding Process Myths Versus Facts

Shannon Sabens of CrowdStrike chats with Dave Morse, program coordination lead for the CVE Program, about the myths and facts of the CVE Numbering Authority (CNA) partner onboarding process. Truth a...

1 Okt 202424min

Expected Impact of the CNA Rules 4.0

Expected Impact of the CNA Rules 4.0

Host Shannon Sabens speaks with Art Manion and Kent Landfield, all three of whom are CVE Board members and CVE Working Group (WG) chairs, about the all-new “CVE® Numbering Authority (CNA) Operational ...

21 Mai 202437min

Swimming in Vulns (or, Fun with CVE Data Analysis)

Swimming in Vulns (or, Fun with CVE Data Analysis)

Host Shannon Sabens of CrowdStrike chats with Benjamin Edwards and Sander Vinberg, both of Bitsight, about analyzing vulnerability data in the CVE List. This is a follow-on to their “CVE Is The Worst ...

29 Apr 202443min

Meet the 3 New CVE Board Members

Meet the 3 New CVE Board Members

In this episode — recorded live at “CVE/FIRST VulnCon 2024” — CVE Board member and CVE podcast host Shannon Sabens of CrowdStrike chats with the three newest CVE Board members: Madison Oliver of GitHu...

9 Apr 202425min

Populært innen Business og økonomi

stopp-verden
dine-penger-pengeradet
lydartikler-fra-aftenposten
rss-penger-polser-og-politikk
e24-podden
rss-borsmorgen-okonominyhetene
rss-skravla-gar
pengepodden-2
rss-pa-konto
utbytte
tid-er-penger-en-podcast-med-peter-warren
morgenkaffen-med-finansavisen
liberal-halvtime
livet-pa-veien-med-jan-erik-larssen
okonomiamatorene
lederpodden
rss-markedspuls-2
rss-kron-podden
stockup
boligbobla