CISA Secures Funding to Strengthen Vulnerability Tracking and Mitigation
Cybersecurity Dive
|
Contributed by: Drex DeFord
Summary
The Cybersecurity and Infrastructure Security Agency (CISA) has renewed funding for the Common Vulnerabilities and Exposures (CVE) program for an additional 11 months, ensuring the continued tracking of software vulnerabilities. This agreement follows warnings from Mitre Corporation regarding the potential expiration of funding, which raised concerns among cybersecurity professionals about the risks posed by delayed vulnerability disclosures. Experts warned that funding lapses could exacerbate backlogs in addressing security flaws, increasing exposure to exploitation by criminal and state-sponsored actors.