CVE program faces swift end after DHS fails to renew contract

Re:CVE program faces swift end after DHS fails to renew cont... by eadmund on Wednesday April 16, 2025 @06:27AM (#43703630)

> I wonder what level of compartmentalisation inside DHS means they didn't see this as having sufficient downsides?

The National Vulnerability Database has been unable to keep up with the flow of CVEs for over a year now:

- https://anchore.com/blog/national-vulnerability-database-opa...

- https://www.cyberreport.io/news/cve-backlog-update-the-nvd-s...

- https://www.ibm.com/think/insights/cve-backlog-update-nvd-st...

- and many, many, many others

It has been a complete disaster for months. At this point, perhaps the thinking is to radically change approaches?

[ Parent | on HN ]

Re:CVE program faces swift end after DHS fails to renew cont... by rco8786 on Wednesday April 16, 2025 @07:36AM (#43704073)

> perhaps the thinking is to radically change approaches?

If there had been a replacement or reform plan for even one single iota of the things this admin has cut, I might give them the benefit of the doubt. But there's not. It's just kill, kill, kill.

[ Parent | on HN ]

Re:CVE program faces swift end after DHS fails to renew cont... by gtirloni on Wednesday April 16, 2025 @06:44AM (#43703709)

You assume there's a plan. Interesting.

[ Parent | on HN ]

Re:CVE program faces swift end after DHS fails to renew cont... by metabagel on Wednesday April 16, 2025 @10:16AM (#43705882)

Cutting the program would seem to go in the opposite direction of what is needed.

[ Parent | on HN ]