CIRCLE WITH A DOT

Last day of RSAC conference. Once more into the breach [response and recovery AI tooling sales talks]!

Anyone know of research on how people “discover” new open source that they want to use? Does one search GitHub for strings relevant to what they are looking for? See code used in other projects? Are there other registries?

Tired: the meeting could have been an email.Wired: This email could have been both written and read by an LLM.

Some rare good news is cybersecurity. The foundation of the vulnerability management ecosystem is secured, thanks to some great work by our embattled friends at CISA.Great reporting by @metacurity @msbrumfield https://www.csoonline.com/article/4142600/cve-program-funding-secured-easing-fears-of-repeat-crisis.html

@douglevin @allanfriedman a lot of the CVE growth has been from a small number of CNAs. I would have expected the number explored to drop