No items found.
Event
OWASP Portland - May 2024 Chapter Meetup
Join us in downtown Portland for the OWASP Portland Chapter May 2024 meetup!
Location: 707 SW Washington St #1100 · Portland, OR
Managing Open Source Vulnerabilities for PCI DSS Compliance
PCI DSS version 4.0 contains a host of new practices that will become requirements on March 31, 2025. In this talk, we focus on a change that looks — at first glance — to be minor, but in reality could have significant implications for Application Security teams: the requirement to manage all internal vulnerabilities, regardless of criticality.
We’ll focus on how to address open source software (OSS) vulnerabilities, including:
- What it means to “manage vulnerabilities”
- Why OSS presents the greatest risk to compliance with this new requirement
- The security tool problem preventing organizations from addressing OSS risk
- Getting accurate dependency inventories and prioritizing remediation
- Setting up guardrails to ensure developers select safe OSS dependencies
Contents
.png)
Introducing AURI Fix for Open Source
Introducing AURI Fix for Open Source
Read more
.png)
eMudhra Intermediate CA Compromise: The Trust Stores You Patched, and the Ones You Didn't Know You Had
Read more
Gemini 4 Argon on Cursor: solid security score, two unique solves, but slower and more expensive
Cursor with Gemini 4 Argon matches Fable 5 at 29% SecPass — tying for the top security score on Cursor — and uniquely solves two tasks no other combo on the leaderboard secures. But it is also the slowest and most expensive recent frontier combo we have tested.
Read more
Want to stay in the loop?
Sign up for our newsletter.