CVE program to track security defects is about to lose federal financing

It is about to run out of funding for the weakness and exhibitions program (CVE) – a system that is used by major companies such as Microsoft, Google, Apple, Intel and AMD to determine and track cybersecurity gaps that were publicly unveiled. The program helps engineers to determine the extent of misuse and how to determine the priorities of the application of corrections or other disclosure.

Mitri, the federal funded organization behind the program, confirmed to Drilling The contract “Development, Operation and Update” will end on April 16.

It was launched for the first time in 1999, CVE includes a database Participating organizations Knowledge of the known weaknesses of cybersecurity can be set. Knowledge consists of “CVE” letters, followed by a year and a number, such as CVE-2022-27254, allowing security professionals to monitor details about the weaknesses that may affect the devices that we use every day and systems that contain important information for everything we do in practice.

Lukasz Olejnik, Security and Privacy Researcher, He said in a post on x The lack of support for CVE can “paralyze” cyber security systems around the world. “The result will be a collapse in coordination between sellers, analysts and defense systems – no one will be certain that they refer to the same weakness.” “Total chaos, sudden weakness of cybersecurity in all fields.”

“The government continues to make great efforts to support the role of MITER in the program and MITER is still committed to CVE as a global resource,” said Yusri Parsom, Metri Vice President at Al Watan Insurance Center in an e -mail statement. Drilling. Parsom also said that the change will affect the popular weakness program, which index the weaknesses of the devices and programs.

The news was monitored for the first time in A leakage message to Metri board members Posted on X and Bluesky. MITER receives funding from the US Department of Internal Security (DHS) and the Infrastructure Security Agency (CISA) to “running and developing the CVE program as an independent and objective third party,” according to Video clip about the program.