We are proud to present one of the speakers at the first GVIP Summit: Andrey Lukashenkov from Vulners. Andrey has worked a long time with vulnerabilities and have a lot of insights to share.
Talk title: Beyond CVE: Reconciling Overlap, Gaps, and Granularity Across Vulnerability Sources
Vulnerability “databases” increasingly behave less like a single ground truth and more like a federation of partially overlapping views – each optimized for different goals: coordination, enrichment, ecosystem-specific advisories, exploit context, or operational prioritization. This talk maps where the major sources align, where they diverge, and why those discrepancies persist even when everyone is “talking about the same vulnerability.”
We’ll look at overlap and coverage through a practical lens: publication volume dynamics, which fields are consistently present (and which are not), and how enrichment pipelines, curation choices, and timing differences shape what defenders actually see. The core focus is not who is “right,” but how to interpret conflicts, missing data, and duplicate or split records without breaking downstream workflows.
Finally, we’ll dig into the granularity problem: when a single identifier is too coarse (or too fine) to represent real-world risk, how related-vulnerability identification and linkage failures emerge, and what that means for triage, SBOM matching, and remediation coordination. The session ends with a playbook-style view of how to build resilient vuln-intel workflows that survive multi-source reality—without assuming any one feed is complete or consistently timely.
Register today to get a seat at the GVIP Summit #01 in Brussels, Belgium!
