Jerry Gamblin
where else to find them
no profile links on file
what they talk about
all 5 in the filters
where they keep going back
- CVE/FIRST VulnCon & Annual CNA Summit2 editions2025–2026
- BSidesSF2 editions2019–2025
on a stage with
- Jay Jacobsonce
- Jonathan Cranonce
who talks about the same things
- Jay Jacobs20 talks
- Art Manion19 talks
- Madison Oliver8 talks
- Alec Summers9 talks
- Sander Vinberg7 talks
- Lisa Olson6 talks
| title | conference | date |
|---|---|---|
| CVE Decaf: Brewing Better and More Actionable Data Quality | CVE/FIRST VulnCon 2026 & Annual CNA Summit | 2026-04-13 |
Introduces a practical Data Quality Assessment Framework that separates schema limits from how CNAs populate fields, classifying issues as population gap… | ||
| The Growing Crisis in CVE Data Quality | BSidesSF 2025 | 2025-04-26 |
CVE records grow fast and many are low quality: 30% more CVEs year‑over‑year and 291,000 CVEs in NVD with roughly 24,000 lacking CVSS/CPE/CWE and about 20%… | ||
| Using Jupyter Notebooks to Explore Public CVE Data | CVE/FIRST VulnCon 2025 | 2025-04-07 |
Provides ready-to-run Jupyter notebooks and a GitHub repo that pull NVD via the NVD 2.0 API and a 1.3 GB consolidated JSONL hosted at nvd.handsonhacking.org… | ||
| The Quality Imperative for CVEs: The Need For Enhancing Vulnerability Reporting Standards | CVE/FIRST VulnCon 2025 | 2025-04-07 |
CVE records often publish with only three required fields and the sole automated description check is a 1–4,916 character length limit; the CVE schema lists… | ||
| Automating Web Application Bug Hunting | BSidesSF 2019 | 2019-03-03 |
Tool demo of an automation platform that discovers and enriches an organization’s web assets, creates entity graphs and runs recursive scans to enumerate… | ||
| How to Build an Application Security Program | BSidesSF 2019 | 2019-03-03 |
Argues there is no perfect appsec product and successful programs pair static + dynamic tools (static often ~$5k, dynamic $10,000–$20,000), rely on people more… | ||
| nothing matches | ||