Alec Summers
where else to find them
no profile links on file
what they talk about
all 4 in the filters
where they keep going back
- CVE/FIRST VulnCon & Annual CNA Summit3 editions2024–2026
on a stage with
all 16 in the filters
who talks about the same things
- Lindsey Cerkovnik8 talks
- Sandy Radesky2 talks
- Steve Christey Coley2 talks
- Art Manion19 talks
- Bob Lord9 talks
- Lisa Olson6 talks
| title | conference | date |
|---|---|---|
| Panel: CVE Record Disputes Discussion: Policy, Process, and Opportunities for Improvement | CVE/FIRST VulnCon 2026 & Annual CNA Summit | 2026-04-13 |
Panel explains why CVE records get an explicit disputed tag and how the policy enforces a 3-day acknowledgement / 5-day decision timeline with escalation after… | ||
| The CVE Program Quality Era: Strengthening Trust and Impact In Global Vulnerability Data | CVE/FIRST VulnCon 2026 & Annual CNA Summit | 2026-04-13 |
The CVE Program announces a “Quality Era” that pushes beyond ID/description/references toward required metadata, automation, and governance changes: updated… | ||
| From Roadmap to Results: Measuring CWE Adoption to Enable Prevention | CVE/FIRST VulnCon 2026 & Annual CNA Summit | 2026-04-13 |
CWE reports measurable adoption: a public REST API and 75 new weakness diagrams support automation, the community-driven CDR has 191 submissions (102 still… | ||
| Vulnerability Root Cause Mapping with CWE | CVE/FIRST VulnCon 2025 | 2025-04-07 |
Claims that grounded LLM workflows can scale CVE→CWE mapping are backed by a prototype that combines sparse/dense/graph retrievers to cut ~1,000 CWEs to a… | ||
| The Enriched CVE Record: Redefining Completeness and Quality for Greater Impact | CVE/FIRST VulnCon 2025 | 2025-04-07 |
CVE records now include CNAs adding structured metadata like CVSS, CWE and CPE at disclosure, driven by an April 2024 enrichment initiative that produces a… | ||
| Software Identity in the Vulnerability Management Ecosystem | CVE/FIRST VulnCon 2025 | 2025-04-07 |
CVE record format now embeds real CPE support so consumers can reuse NVD-style names and the new CPE applicability added field offers concise version-range… | ||
| CISA’s North Star Vision for the CVE Program | CVE/FIRST VulnCon 2025 | 2025-04-07 |
CISA lays out a practical North Star: scale federation to get from completeness to quality, add operational enrichments like SSVC into CVE records, and push… | ||
| Panel Discussion: Enabling Accurate, Decentralized Root Cause Mapping at Scale | CVE/FIRST VulnCon 2024 & Annual CNA Summit | 2024-03-25 |
Working group pilots a federated model (RCM WG) that pairs CVE records with one or more CWE entries via the new CVE JSON data format; published guidance and a… | ||
| The CWE Program: Current State and Road Ahead | CVE/FIRST VulnCon 2024 & Annual CNA Summit | 2024-03-25 |
CWE adopts a federation model since 2019, adds Hardware coverage and a REST API, and runs a GitHub-based CWE Content Development Repository now in pilot with a… | ||
| nothing matches | ||