Lisa Olson
where else to find them
no profile links on file
what they talk about
where they keep going back
- CVE/FIRST VulnCon & Annual CNA Summit2 editions2025–2026
on a stage with
all 12 in the filters
who talks about the same things
- Art Manion19 talks
- Yogesh Mittal4 talks
- Madison Oliver8 talks
- Justin Murphy10 talks
- Lindsey Cerkovnik8 talks
- Peter Allor8 talks
| title | conference | date |
|---|---|---|
| Panel: CVE Record Disputes Discussion: Policy, Process, and Opportunities for Improvement | CVE/FIRST VulnCon 2026 & Annual CNA Summit | 2026-04-13 |
Panel explains why CVE records get an explicit disputed tag and how the policy enforces a 3-day acknowledgement / 5-day decision timeline with escalation after… | ||
| Panel: The CVE Supplier ADP (SADP) Pilot: Am I Affected byUpstream? | CVE/FIRST VulnCon 2026 & Annual CNA Summit | 2026-04-13 |
CVE adds Supplier ADP (SADP) pilot containers to CVE records to publish VEX-like inherited vulnerability status, using the existing CVE-Services ADP endpoint… | ||
| The Hidden Cost of CVEs: Can CSAF and VEX Change the Equation? | CVE/FIRST VulnCon 2026 & Annual CNA Summit | 2026-04-13 |
Estimate that a single Windows CVE can consume 200 million global human hours when scaled across organizations, and a recent Patch Tuesday hits ~120 Windows… | ||
| CNA Birds of a Feather: Open Forum with Certified Numbering Authorities | CVE/FIRST VulnCon 2025 | 2025-04-07 |
Panelists trace CVE evolution from a handful of manual assignments to a federated system that now lists 450 CNAs, produces about 108 CVEs/day and logged… | ||
| BOF - Discussion Regarding False Positive Results from Vulnerability Scanners and the Use of VEX | CVE/FIRST VulnCon 2025 | 2025-04-07 |
Claims that VEX will cut scanner false positives by encoding VEX attestation status for each CVE and that CESAF/OpenVEX exports can be automated; Red Hat and… | ||
| No Action Required: CVE for Software as a Service | CVE/FIRST VulnCon 2025 | 2025-04-07 |
CVE assignment for SaaS now follows revised CNA rules (3.0 → 4.0) and requires showing no action required versus cases that need customer agency; CNAs report… | ||
| nothing matches | ||