
Sign up to save your podcasts
Or


- First off, for folks that don't know you can you give them a brief overview of your background/organizations?
- Josh, let's start with you. Can you explain some of what is going on with the drama around NVD and what happened that caught everyone's attention?
- Dan - I know you've raised concerns around the implications for the community when it comes to the lack of CVE enrichment, how do you see this impacting the vulnerability management ecosystem?
- Josh - Your team has started providing some accompanying resources to try and address the gap, can you tell us a bit about that?
Dan - You've spun up an open letter to congress and have kicked off a bit of a grass roots effort to raise awareness around the problem. How is it going so far and what are you hoping to accomplish with the letter?
- Why do you both think this is such a big deal, and how can something so critical to the entire software ecosystem be so underfunded, overlooked and taken for granted?
- What are some things you all hope to see in the future to resolve this, both from NIST/NVD and the Government but also from industry as well?
By Chris Hughes4.9
1616 ratings
- First off, for folks that don't know you can you give them a brief overview of your background/organizations?
- Josh, let's start with you. Can you explain some of what is going on with the drama around NVD and what happened that caught everyone's attention?
- Dan - I know you've raised concerns around the implications for the community when it comes to the lack of CVE enrichment, how do you see this impacting the vulnerability management ecosystem?
- Josh - Your team has started providing some accompanying resources to try and address the gap, can you tell us a bit about that?
Dan - You've spun up an open letter to congress and have kicked off a bit of a grass roots effort to raise awareness around the problem. How is it going so far and what are you hoping to accomplish with the letter?
- Why do you both think this is such a big deal, and how can something so critical to the entire software ecosystem be so underfunded, overlooked and taken for granted?
- What are some things you all hope to see in the future to resolve this, both from NIST/NVD and the Government but also from industry as well?

184 Listeners

373 Listeners

637 Listeners

1,017 Listeners

36 Listeners

7,999 Listeners

175 Listeners

188 Listeners

73 Listeners

57 Listeners

9,829 Listeners

134 Listeners

48 Listeners

4 Listeners