Skip to content

Details

In cybersecurity, we love frameworks, playbooks, and repeatable processes. We’re often told that finding your first CVE is just another checklist: use these tools, follow this methodology, target these technologies, and success will follow.
But anyone who has actually gone down this road knows the truth: vulnerability research doesn’t work like a recipe.
In fact, trying to force yourself into someone else’s formula often leads to frustration, burnout, and a feeling that you’re doing everything right, yet learning very little. Especially when that formula ignores the one thing that really matters: what genuinely motivates you.

In this talk, TheMalwareGuardian takes us beyond the checklist and into reality, walking us through the very different paths professionals have taken to responsibly report their first vulnerability and earn a CVE. Some paths are direct and beginner friendly. Others are indirect, unconventional, or completely unexpected.
What these paths share isn’t a specific tool, exploit technique, or tech stack. It’s something far more powerful: sustained curiosity and a real desire to understand how systems work and why they sometimes fail.

Drawing from his own experiences, our presenter will demystify how vulnerabilities are discovered, responsibly disclosed, communicated with vendors, and eventually assigned CVE IDs, while also shedding light on the often overlooked challenges of timelines, coordination, and real world communication.
This is not a talk about how to get a CVE.
It’s a talk about recognizing your path.
Because when you focus on what truly interests you (and stay there long enough) vulnerability research stops feeling forced… and meaningful results have a way of showing up naturally.

  • For more information and updates, check our site https://dc518.github.io/
  • Doors open at 1:00pm for social hang out. The presentation starts sharp at 2pm. The Guilderland Public Library is located at 2228 Western Avenue, Guilderland, New York 12084
  • This event is free and open to all the community. No attendee limits.
Events in Guilderland, NY
Cybersecurity
Software Security
Knowledge Sharing
Information Security
Vulnerability Assessment

AI summary

By Meetup

Talk for cybersecurity researchers about paths to reporting a first vulnerability and earning a CVE; learn how responsible disclosure works and identify a path.

Members are also interested in