Dems want watchdog study of two troubled federally-funded vulnerability tracking initiatives
The CVE program publishes standardized information about known cyber vulnerabilities, while the NVD is a storehouse for vulnerability management data.
Advertisement
NIST
Unverified code is the next national security threat
Congress and federal agencies can take some simple steps to better protect open-source software.
Senators take another swing at vulnerability disclosure policy bill for federal contractors
Sens. Warner and Lankford reintroduced their VDP bill after a companion version passed the House in March.
Quantum computer threat spurring quiet overhaul of internet security
Cryptography experts said a “Cambrian explosion” of standards is on its way as a response to worries over quantum computers breaking current algorithms.
CISA reverses course, extends MITRE CVE contract
While the last-minute extension averts an immediate lapse in support, rival organizations are being stood up to supplant the global vulnerability system.
Is Ivanti the problem or a symptom of a systemic issue with network devices?
Exploited vulnerabilities have turned up in Ivanti products 16 times since 2024. That’s more than any other vendor in the network edge device space.
Advertisement
Infosec pros: We need CVSS, warts and all
The Common Vulnerability Scoring System has a lot of critics, but experts say it’s still the best unified way to share the severity of cybersecurity flaws.
White House launches cybersecurity label program for consumers
The White House announced Tuesday the official launch of the U.S. Cyber Trust Mark, a cybersecurity labeling initiative aimed at enhancing the security of internet-connected devices. The…
Agencies push for digital transformation amid security challenges
Federal agencies are accelerating digital transformation efforts to meet public expectations and comply with mandates, but transitioning securely to platforms like Salesforce often requires specialized help, according…
NIST’s Cherilyn Pascoe on what types of cybersecurity attacks agencies face
Cherilyn Pascoe | Director, National Cybersecurity Center of Excellence | NIST