CVE Funding Cut Threatens Cybersecurity Vulnerability Tracking

April 16, 2025, 9:21 am

Recent reports reveal that US government funding for the Common Vulnerabilities and Exposures (CVE) database has been slashed, jeopardizing its role as a central hub for tracking software and operating system vulnerabilities. The defunding raises alarms over potential delays in identifying and mitigating critical security flaws, increasing the risk of widespread exploitation by cyber attackers. Experts warn that this move could impair organizations’ abilities to respond rapidly to emerging threats in a landscape of escalating digital attacks.

Reddit: r/politics

Bluesky: @couts.bsky.social, @wired.com, @wired.com, @hackernewsbot.bsky.social, @macrumors.bsky.social

wired.com / ‘Stupid and Dangerous’: CISA Funding Chaos Threatens Essential Cybersecurity Program

The CVE Program is the primary way software vulnerabilities are tracked. Its long-term future remains in limbo even after a last-minute renewal of the US government contract that funds it.

techdirt.com / US Government Almost Kills Critical Cybersecurity Database

In what appears to be the latest move in this administration’s total incompetence with regards to critical government tech infrastructure, MITRE announced yesterday that funding had run out for the Common Vulnerabilities and Exposures (CVE) system, the fundamental framework that basically...

arstechnica.com / CVE, global source of cybersecurity info, was hours from being cut by DHS

Board members have launched a nonprofit to take over the program from MITRE.

androidheadlines.com / The U.S. Just Defunded a Key Security Database, And Your Android Phone Could Pay the Price

The post The U.S. Just Defunded a Key Security Database, And Your Android Phone Could Pay the Price appeared first on Android Headlines.

appleinsider.com / Online risks will escalate as the global security vulnerability database gets defunded

The U.S. government has cut its funding of the CVE database, used to track security vulnerabilities in operating systems and software. It's a change that will make it harder for Apple to monitor and fix software issues.The loss of CVE will make it harder to track malwareThe Common Vulnerabilities...

betanews.com / Could this be the end of CVE? And what does it mean for cybersecurity?

The CVE (Common Vulnerabilities and Exposures) database is widely used across many cybersecurity tools, allowing the tracking of vulnerabilities. The CVE program has been in existence for 25 years but today MITRE -- the non-profit organization which looks after the database -- has announced that...

bleepingcomputer.com / CISA extends funding to ensure 'no lapse in critical CVE services'

CISA says the U.S. government has extended funding to ensure no continuity issues with the critical Common Vulnerabilities and Exposures (CVE) program. [...]

thecvefoundation.org / CVE Foundation Launched to Secure the Future of the CVE Program

Comments

macrumors.com / Security Database Used by Apple Goes Independent After Funding Cut

Apple, along with other tech companies, relies on the Common Vulnerabilities and Exposures (CVE) program to identify and track security flaws in its software. This critical cybersecurity resource now faces an uncertain future, after federal funding was today abruptly cut off. In response to...

permalink 15 stories from 11 sources in 2 days ago #cybersecurity #opensource #infosec #apple #software #digital-transformation #dataprivacy #cloudsec #mobile

Related Tags

CVE Funding Cut Threatens Cybersecurity Vulnerability Tracking

Related Tags

Cybersecurity

Open Source

IT Security

Apple

Software

Digital Transformation

Data Privacy

Cloud Security

Mobile Applications