Towards Effective and Scalable Vulnerability Management
Explore challenges and solutions in modern vulnerability management, focusing on automation, exploitability-based prioritization, and frameworks like CSAF and VEX to improve organizational security posture.
Scan, Patch, VEX - Using Open Source Tools to Manage Vulnerabilities in Containers
Learn to manage vulnerabilities in cloud-native environments using open-source tools like Trivy and Copacetic, and standards like VEX. Improve security across development, testing, and production.
How to Generate VEX Automatically for Your Project
Learn to automate VEX generation for Kubernetes workloads, reducing false positives in security scans and streamlining vulnerability management using Kubescape and a new GitHub Action.
Automated End-to-End VEX Streams You Can Trust
Explore automated VEX streams for trusted vulnerability communication. Learn to build end-to-end systems using OpenVEX, enhancing software security without human intervention.
Eating the Open Source Security Sandwich with Skootrs
Explore Skootrs, an open-source tool simplifying adoption of security practices for software developers through automation and guardrails.
Beyond Whack-a-Mole: Scaling Vulnerability Management by Embracing Automation
Explore automated, risk-oriented vulnerability management strategies using SBOM, CSAF, and VEX to streamline processes and align remediation with genuine risk impacts.
Hitchhikers' Guide to the Vulniverse
Explore key elements of vulnerability disclosure and management, including CVE, CVSS, CWE, and VEX. Gain insights into communication between security teams and researchers.
Planning for Retirement: How Can We Prepare for Software's End-of-Life and End-of-Support - Lecture
Explore software end-of-life/support challenges, terminology, and potential solutions. Discuss impacts on supply chain security and the role of transparency efforts in managing EOL/EOS issues.
Cloud Native Supply Chain Security: Beyond SBOMs - Perspectives and Practices
Insights on cloud native supply chain security beyond SBOMs. Experts discuss straightforward approaches, simple security practices, and future perspectives using open-source tools and frameworks.
Your Critical System Is - Not? - Vulnerable - CSAF, VEX, SBOM and the Future of Advisories
Explore the future of vulnerability advisories with CSAF, VEX, and SBOM. Learn about critical system security, risk assessment, and automation in the evolving landscape of cybersecurity.
Your Software IS - NOT Vulnerable - CSAF, VEX, and the Future of Advisories
Explore the future of software security advisories, focusing on CSAF and VEX, and learn how to manage the increasing volume of vulnerability information effectively.
Create an Auto-Fence Asset in Houdini - The Nodes 2
Craft an auto-generating fence asset in Houdini using advanced node techniques, enhancing your procedural modeling skills for efficient 3D environment creation.
Shifting Down: Empowering Platforms to Reduce Developer Complexity
Explore the concept of "shifting down" as an alternative to "shift left," empowering platforms to make decisions and automate processes, reducing developer cognitive load.
Understanding Software Component Analysis (SCA) in Plain Language
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, demystifying their importance for protecting organizational assets and code integrity.
What Is Going On In Your Source Code? Understanding Software Component Analysis in Plain Language
Gain insights into software supply chain security concepts like SBOM, VEX, and SLSA, understanding their importance in protecting organizations from emerging security threats.
Understanding Exploitability with VEX, EPSS, and Other Standard Frameworks
Explore key frameworks for assessing software vulnerabilities, including VEX, EPSS, CVSS, and SBOMs. Learn to enhance security through automated policy and GitOps practices.
Fortifying AIOps with CSAF and VEX Integration for Enhanced Security Management
Discover how to enhance AIOps security through CSAF and VEX integration, enabling real-time vulnerability management and improved threat response for server and storage infrastructure.