Inside the Advisory Database and what happens when vulnerability volume breaks records (opens in new tab)

Madison Ficorilli is a vulnerability transparency advocate and senior security manager at GitHub. She leads the advisory database curation team and contributes to vulnerability reporting, response, and disclosure through several industry organizations. Her perspective combines current leadership experience with prior roles in incident response and vulnerability coordination.

Leadership at GitHub

• Leads GitHub’s advisory database curation team.
• Focuses on improving vulnerability transparency and the quality of security advisory information.

Industry and Open Source Security Work

• Co-chairs a relevant Open Source Security Foundation (OpenSSF) working group.
• Serves on the CVE Program Board.
• Advocates for effective vulnerability reporting, response, and disclosure practices.

Professional Background

• Previously worked as a product incident response analyst at GitHub.
• Served as a vulnerability coordinator at the CERT Coordination Center at Carnegie Mellon University’s Software Engineering Institute.

Her career reflects deep expertise across vulnerability coordination, incident response, database curation, and security disclosure policy.