Event
Managing Open Source Vulnerabilities for PCI DSS Compliance
Date
June 18, 2024
Time
9:00am - 9:30am PT
Event Type
Virtual
PCI DSS version 4.0 contains a host of new practices that will become requirements on March 31, 2025. In this talk, we focus on a change that looks — at first glance — to be minor, but in reality could have significant implications for Application Security teams: the requirement to manage all internal vulnerabilities, regardless of criticality.
We’ll focus on how to address open source software (OSS) vulnerabilities, including:
- What it means to “manage vulnerabilities”
- Why OSS presents the greatest risk to compliance with this new requirement
- The security tool problem preventing organizations from addressing OSS risk
- Getting accurate dependency inventories and prioritizing remediation
- Setting up guardrails to ensure developers select safe OSS dependencies
Want to stay in the loop?
Sign up for our newsletter.
Introducing Full Stack Reachability: Container Scanning That Actually Reduces Noise
Cut container vulnerability noise by up to 90% with full-stack reachability analysis spanning application and container image OS layers.
Read more
Classic Vulnerabilities Meet AI Infrastructure: Why MCP Needs AppSec
MCP servers inherit classical vulnerabilities like command injection, path traversal, and SSRF. Here's why LLMs and MCP deserve the same security practices as traditional applications.
Read more
How Fake Font Packages Abused npm as a CDN
101 packages disguised as font files distributed 34 TiB of data via npm's infrastructure—with a total of 4.3 PiB transferred via downloads.
Read more