S6E12: Resilient Cyber w/ Josh Bressers & Dan Lorenc

Untangling the NVD Chaos

In this episode, Chris Hughes is joined by Josh Bressers (VP of Security at Anchore) and Dan Lorenc (CEO of Chainguard) to discuss the latest disruptions within the National Vulnerability Database (NVD). The trio dives into the unexpected halt in CVE enrichment at NVD, the consequences for vulnerability management, and the broader software ecosystem.

Key topics include:

  • What led to the NVD pause and its impact on vulnerability scanning

  • The importance of severity scores and product mapping in the NVD

  • The potential for a more distributed, open-source-driven solution

  • Concerns over future vulnerability management, compliance, and security standards