Communications Very Erratic (CVE): Stabilizing Vuln Data for the Industry (OSFF NY Preview)

https://is1-ssl.mzstatic.com/image/thumb/Podcasts125/v4/a0/bc/fc/a0bcfcb0-b5f8-a267-c2a7-84eacf1bbe99/mza_4192344857202381377.jpg/600x600bb.jpg

FINOS Open Source in Finance Podcast

FINOS

137 episodes

1 day ago

The FINOS Open Source in Finance Podcast celebrates open source projects and interesting topics at the cross section of financial services and open source. So far, our industry experts have discussed practical applications of and their real-world experiences with a range of open source projects including desktop interoperability, low code platforms, synthetic data, and data modeling. They’ve also discussed best practices for inner source, common myths about open source and why commercial companies choose to introduce open source offerings. Tune in to hear what comes next.

Technology

RSS

All content for FINOS Open Source in Finance Podcast is the property of FINOS and is served directly from their servers with no modification, redirects, or rehosting. The podcast is not affiliated with or endorsed by Podjoint in any way.

Technology

https://d3t3ozftmdmh3i.cloudfront.net/production/podcast_uploaded/5145728/5145728-1619839453520-ae2cd3459e8eb.jpg

Communications Very Erratic (CVE): Stabilizing Vuln Data for the Industry (OSFF NY Preview)

FINOS Open Source in Finance Podcast

34 minutes 14 seconds

1 month ago

Communications Very Erratic (CVE): Stabilizing Vuln Data for the Industry (OSFF NY Preview)

🚨 What happens when the backbone of vulnerability reporting wobbles? In April 2025, funding shocks to CVE/CWE—and the downstream NVD—sparked panic before a short-term lifeline appeared. The uncertainty hasn’t gone away.In this clip:Christopher “CRob” Robinson, CTO & Chief Security Architect, OpenSSF (The Linux Foundation)CRob previews his OSFF NY session on why reliable, authoritative vulnerability metadata is critical for banks, regulated enterprises, and open source maintainers—and what upstream is doing about it. He walks through the recent CVE/NVD turbulence, why downstream teams (risk, OSPOs, product owners) struggle to meet regulatory obligations without stable data, and how the open source community is collaborating to deliver consistent, high-quality vulnerability information going forward. Expect clear context, practical takeaways, and a path from fragmented signals to trustworthy feeds.🎟️ See CRob’s full talk at OSFF New York (Oct 21–22, 2025).🌐 More about FINOS: https://www.finos.org/📧 Join our newsletter: https://www.finos.org/newsletter#FINOS #OSFFNY #OpenSourceSecurity #OpenSSF #CVE #CWE #NVD #VulnerabilityManagement #Risk #Compliance #SupplyChainSecurity