Crisis Averted: CISA Extends MITRE’s CVE Program Contract Amidst Funding Fiasco
The Cybersecurity and Infrastructure Security Agency extended its contract for the Common Vulnerabilities and Exposures Program to avoid a lapse in critical services. The program, a global standard for classifying cybersecurity vulnerabilities, faced funding uncertainty, but the contract was renewed for 11 months, ensuring continued support and avoiding a cybersecurity cliffhanger.

Hot Take:
Looks like the cybersecurity world almost had a collective heart attack when the CVE Program funding hit a speed bump. But fear not, the government swooped in like a caped crusader to save the day—at least for the next 11 months. Time to start counting down until the next episode of “Will They or Won’t They Fund It?”
Key Points:
- CISA extended its contract for the MITRE-backed CVE Program, averting a funding crisis.
- The CVE Program is vital for classifying cybersecurity vulnerabilities globally.
- A new CVE Foundation may be formed due to concerns over reliance on a single government sponsor.
- The contract extension lasts 11 months, but future funding remains uncertain.
- CISA faces potential budget cuts and contract terminations amid reevaluation of its priorities.
Already a member? Log in here