Shelby Cunningham
where else to find them
mastodon:@scunning@metalhead.club
what they talk about
where they keep going back
- CVE/FIRST VulnCon & Annual CNA Summit3 editions2024–2026
on a stage with
- Art Maniononce
- Caitlin Condononce
- David Welchonce
who talks about the same things
- Art Manion19 talks
- Jonathan Evans3 talks
- Madison Oliver8 talks
- David Welch2 talks
- Lisa Olson6 talks
- Kadi McKean4 talks
| title | conference | date |
|---|---|---|
| Supply Chains and Malware Campaigns: Is CVE the Right Way to Name the Game? | CVE/FIRST VulnCon 2026 & Annual CNA Summit | 2026-04-13 |
2025–2026 cases force a tradeoff: XZ utils backdoor (CVE‑2024‑3094) and TJ Actions (CVE‑2025‑30066) show a CVE ID speeds automated alerts and toolchain… | ||
| Exploit Maturity: Your New Best Friend in CVSS | CVE/FIRST VulnCon 2025 | 2025-04-07 |
CVSSv4 adds an exploit maturity metric with three levels: Attacked (exploited in the wild), POC (public proof‑of‑concept), and Unreported (no public proof)… | ||
| Reducing Ratio of Reserved But Public CVEs | CVE/FIRST VulnCon 2024 & Annual CNA Summit | 2024-03-25 |
GitHub moves from under 5,000 advisories to over 177,000 advisories, and building automation around the CVE Services API makes the concrete claim that… | ||
| nothing matches | ||