Homeland Security funding for CVE program expires
Homeland Security funding for CVE program expires
Updated: Because vulnerability management has nothing to do with national security, right?
Looks like they’d been preparing to get screwed over and have a foundation spun up already at least to keep the work going. https://www.thecvefoundation.org/
Excellent, I was thinking a bunch of cybersec nerds would have contingency plans, glad I was right lol
On one hand, I'm really glad they had something like this ready, espeecially as someone who did work in cybersecurity.
On the other, I really hope they move it outside of the US jurisdiction. As it is now (based in Washington, as mentioned in FAQ), the US has basically won - CVE continues to function, they don't need to pay for it, and they can still exert power over it since it is still in the US. Fuck that.