Blue Team Con 2026

Name: The End is Just the Beginning of Better Security: Enhancing Vulnerability Management with OpenEoX
Start: 2026-09-12T10:30:00-0500
End: 2026-09-12T11:30:00-0500

The End is Just the Beginning of Better Security: Enhancing Vulnerability Management with OpenEoX

Saturday September 12, 2026 10:30am - 11:30am CDT

Swissôtel Chicago

Persistent cyber campaigns continue to threaten both public and private sectors, with outdated, unsupported edge devices emerging as a prime target for Nation-state adversaries. End-of-Life/End-of-Support (EoL/EoS) technologies create enduring exposure across our Nation's critical infrastructure, prompting CISA's February 2026 Binding Operational Directive (BOD) 26-02 requiring federal agencies to identify and replace EoS edge devices, maintain current software, and patch known vulnerabilities when immediate replacement is not feasible. The presentation will also introduce OpenEoX, a new open source, machine-readable standard, developed by OASIS Open, that streamlines the exchange of product lifecycle data across software, hardware, services, and AI models, and explains how it enables automated, timely detection of EoL/EoS assets and seamless integration with existing tools and standards such as Software Bills of Material (SBOMs) and the Common Security Advisory Framework (CSAF). It will detail the benefits for government agencies, vendors and open source maintainers, downstream users, and the broader ecosystem, and show how OpenEoX adoption supports transparency and consistency at scale. The session will also outline actions to operationalize OpenEoX, such as publishing OpenEoX data publicly, integrating OpenEoX into scanners and asset platforms, and updating workflows to drive proactive replacement, patching, and upgrades for unsupported devices. The goal is coordinated adoption that reduces risk and strengthens security through a standardized, transparent, and automated lifecycle management framework.

Speakers

Justin Murphy

Cybersecurity Vulnerability Analyst, DHS/CISA

Justin Murphy is a Vulnerability Analyst with the Cybersecurity and Infrastructure Security Agency (CISA). He helps to coordinate the remediation, mitigation, and public disclosure of newly identified cybersecurity vulnerabilities in products and services with affected vendor(s... Read More →

Saturday September 12, 2026 10:30am - 11:30am CDT
Swissôtel Chicago 323 E Wacker Dr, Chicago, IL 60601, USA

Talk

Company DHS/CISA
Audience Intermediate
Subject Vulnerability Management
global Y

Tickets

Success you have shared X tickets.

Blue Team Con 2026

Justin Murphy

Get help with the event

Choose your checkout method

Success you have shared X tickets.

Blue Team Con 2026

Justin Murphy

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Get help with the event