Giuseppe Di Terlizzi

• Website: links.giterlizzi.dev/

Recent Actions

• Posted SSVC.pm: Stakeholder-Specific Vulnerability Categorization on CPAN to Giuseppe Di Terlizzi

  If you work anywhere near vulnerability management, you've run into the CVSS problem: a single severity number that tells you almost nothing about what to actually do. CVSS was never designed to be a triage tool, and treating it like one is how organizations end up "patching everything" or,…

• Posted SBOM::CycloneDX 1.07 is released to Giuseppe Di Terlizzi

  I've released a new version of SBOM::CycloneDX with support for the OWASP CycloneDX 1.7 specification (ECMA-424).

  This release includes the new elements introduced in 1.7, with a focus on:

  • Enhancements to Cryptography Bill of Materials (CBOM)
  • Citations: references an…

Recent Actions from Giuseppe Di Terlizzi

Comment Threads

No responses to comments.

Responses to Comments from Giuseppe Di Terlizzi