The CVE program for tracking security flaws is about to lose federal funding
Briefly

The Common Vulnerabilities and Exposures (CVE) program, instrumental for identifying cybersecurity vulnerabilities, is facing an imminent funding expiration on April 16. Developed and operated by MITRE since 1999, the program enables major tech companies, including Microsoft and Google, to monitor vulnerabilities through a system of IDs. Experts warn that without financial backing, coordination in cybersecurity efforts could deteriorate, leading to confusion and potentially compromising defenses. MITRE remains committed to the program, which is viewed as essential for maintaining cybersecurity standards globally.
Lukasz Olejnik, a security and privacy researcher, asserted that the lack of funding for CVE could lead to "chaos" in cybersecurity due to miscommunications among stakeholders.
Yosry Barsoum, MITRE's vice president, emphasized the government's commitment to supporting MITRE’s role in CVE, indicating its importance as a global resource.
Read at The Verge
[
|
]