Remote profile

Firmware scanners can return tens of thousands of CVEs, but the EU Cyber Resilience Act (CRA) expects remediation decisions to be risk-based, proportionate, and documented.

How do you find the signal in the noise? 🔍

Our Silver Sponsor, Finite State, put together a practitioner's guide outlining a 5-step framework to filter out low-impact noise using CVSS, EPSS, and binary reachability.

Read the guide here: https://finitestate.io/resources/how-to-prioritize-firmware-vulnerabilities-cra-compliance

Thank you, Finite State, for your support this year!

#AppSec #CyberResilienceAct #FirmwareSecurity #VulnerabilityManagement #SBOM

AI is changing how software gets built. Security has to change with it.

In LLM Application Security: Governing AI-Driven Risk Across the Software Lifecycle, Checkmarx looks at what happens when AI starts generating more of the code we rely on.

Worth a read for anyone thinking seriously about AppSec in the age of AI.

Link to the full report here: https://checkmarx.com/llm-application-security-governing-ai-driven-risk/?utm_source=linkedin_organic&utm_medium=social&utm_campaign=defcon

Proud to have Checkmarx backing AppSec Village™ as a Gold Sponsor!