Uploaded May 2026 | Updated September 2026, 6 hours ago
Chris Coffin (MITRE), MZ MegaZone (F5, Inc., US)
Learn the basics of producing and consuming CVE Records with Purl and CPE software identifiers. When do you use one versus the other, or both?
---
Chris Coffin has been involved in the security industry for more than 25 years and has been involved in the CVE Program specifically since joining MITRE in 2012. Chris is also a CVE Board member and is co-chair of the Quality Working Group (QWG) where efforts are underway to update and improve the CVE Record Format.
MegaZone (yes, that's his name, call him MZ) has been with F5, Inc. since 2010, and the F5 SIRT (Security Incident Response Team) since 2016, where he is currently a Principal Security Engineer. Prior to F5 he did time at Xylogics, Livingston Enterprises, Lucent, GTE Internetworking (BBN), Sling Media, and a few others, after graduating from WPI in 1994. Outside of work he collects whisk(e)y, enjoys travel with his wife (often Disney-related), and volunteers to help a local non-profit in their small Massachusetts town with their tech issues.
MegaZone has been involved with the CVE program since F5 joined as a CNA in 2016 and has taken an increasingly active role over time. He is currently representing the CNA community in the AWG, CO-OP, SPWG, and TWG, and co-chairs the QWG. Previously, he helped organized the first two VulnCons. He is honored to further represent the CNA community on the CVE Board as CNA Liaison.
Chris Coffin (MITRE), MZ MegaZone (F5, Inc., US)
Learn the basics of producing and consuming CVE Records with Purl and CPE software identifiers. When do you use one versus the other, or both?
---
Chris Coffin has been involved in the security industry for more than 25 years and has been involved in the CVE Program specifically since joining MITRE in 2012. Chris is also a CVE Board member and is co-chair of the Quality Working Group (QWG) where efforts are underway to update and improve the CVE Record Format.
MegaZone (yes, that's his name, call him MZ) has been with F5, Inc. since 2010, and the F5 SIRT (Security Incident Response Team) since 2016, where he is currently a Principal Security Engineer. Prior to F5 he did time at Xylogics, Livingston Enterprises, Lucent, GTE Internetworking (BBN), Sling Media, and a few others, after graduating from WPI in 1994. Outside of work he collects whisk(e)y, enjoys travel with his wife (often Disney-related), and volunteers to help a local non-profit in their small Massachusetts town with their tech issues.
MegaZone has been involved with the CVE program since F5 joined as a CNA in 2016 and has taken an increasingly active role over time. He is currently representing the CNA community in the AWG, CO-OP, SPWG, and TWG, and co-chairs the QWG. Previously, he helped organized the first two VulnCons. He is honored to further represent the CNA community on the CVE Board as CNA Liaison.
