In this OODA Loop Q&A with OODA Network Expert Kristin Del Rosso, we discuss her presentation last year at labscon.io 2022 in Scottsdale, AZ, entitled “Is CNVD ≥ CVE? A Look at Chinese Vulnerability Discovery and Disclosure.” Del Rosso is a product manager at Sophos focusing on Incident Response, Threat Intelligence, and the SecOps ecosystem. Previously, she was an analyst on Lookout Mobile Security’s Threat Intelligence team, focusing on reversing Android surveillance software, and tracking threat actors and their infrastructure.