Re:CVE program faces swift end after DHS fails to renew cont...
by goodpoint on Wednesday April 16, 2025 @03:29AM
(#43702533)
There are already many security trackers, why writing a new one? The issue is paying people to handle the advisories.
[ Parent
| on HN ]
Re:CVE program faces swift end after DHS fails to renew cont...
by cookiengineer on Wednesday April 16, 2025 @04:23AM
(#43702890)
I agree with you there. Before CISA got sacked / taken down, they were working together with the BSI and other CERT agencies on a vulnerability exchange format.
This might be the optimum time to implement CSAF and to lead by example when it comes to vulnerability disclosures.