[direwolf]

Originally Posted by DownInFlames

This is ####ing nuts. They’ve basically jammed open the door for bad actors to access any system they want, and Russia is already having a field day.

https://www.theregister.com/2025/04/...nding_for_cve/

Apparently CISA has decided to extend the contract at the last minute.


https://www.forbes.com/sites/kateofl...at-to-do-next/

The potential end to the 25 year old CVE program — which is globally relied upon to identify and mitigate security flaws — was viewed by some experts as part of a cost-cutting drive by the Trump administration.



However, in an eleventh hour turnaround, the U.S. Cybersecurity and Infrastructure Security Agency said it had extended the contract with MITRE. “The CVE Program is invaluable to cyber community and a priority of CISA. Last night, CISA executed the option period on the contract to ensure there will be no lapse in critical CVE services," a CISA spokesperson told me over email. "We appreciate our partners’ and stakeholders’ patience.”