Amid CVE funding fumble, ‘we were mushrooms, kept in the dark,’ says board member
The CVE board has recently expressed frustration over being left in the dark about funding issues, learning through social media that the critical vulnerability tracking programme could have lost its US government support. This unexpected revelation has prompted discussions on the future of the CVE program and its need for a more diversified funding model.
Key Points
- CVE board members were unaware of forthcoming funding cuts until alerted via social media.
- The CVE programme has been crucial for identifying security vulnerabilities since its inception in 1999.
- Board members described themselves as “mushrooms, kept in the dark” regarding funding negotiations.
- The funding concern highlights the risks of relying solely on a single government for a critical global resource.
- A new initiative, the CVE Foundation, is aimed at securing long-term, independent funding from multiple sources.
Why should I read this?
If you’re involved in cybersecurity or just have an ounce of interest in how vulnerabilities are tracked globally, this article is a must-read! It sheds light on the behind-the-scenes struggles of the CVE programme, making you realise just how critical it is to safeguard our digital landscape. We’ve saved you the hassle of sifting through the details, so dive in!