CVE Program Cuts Send the Cyber Sector Into Panic Mode

Executive summary: A news report describes how CISA nearly allowed its contract with MITRE to expire—threatening the continuity of the Common Vulnerabilities and Exposures (CVE) program—but reversed course after widespread community outcry, providing an 11-month funding extension. The article outlines the program's central role in vulnerability management, the risk to vendors and defenders if CVE services lapse, MITRE and community responses (including a new CVE Foundation), and consideration of alternative custodians or competing EU efforts.