'Stupid and Dangerous': CISA Funding Chaos Threatens Essential Cybersecurity Program
Briefly

In a last-minute decision, the United States Cybersecurity and Infrastructure Security Agency renewed its funding for the Common Vulnerabilities and Exposures (CVE) Program, vital for global cybersecurity efforts. The program, managed by MITRE, received an 11-month contract extension to ensure uninterrupted services. Amid ongoing discussions about transitioning to a new nonprofit entity, the CVE Foundation, concerns regarding the program's sustainability and independence from a single government sponsor have surfaced. The CISA highlighted the CVE Program's importance as an invaluable resource for the cyber community.
Since its inception, the CVE Program has operated as a US government-funded initiative, with oversight and management provided under contract.
CISA executed the option period on the contract to ensure there will be no lapse in critical CVE services.
Read at WIRED
[
|
]