
Is the MITRE / CVE Program in Jeopardy? Understanding the Fallout and What Comes Next
Update (April 16, 2024, 4pm GMT): CISA announced it’s extending MITRE’s Federal contract by 11 months, basically ‘saving’ the CVE Program at the 11th hour. But, ‘the wheels’ were already in motion, and concerns were raised whether a globally relied-upon resource like the CVE Program should be tied to a single government sponsor. On April 15, 2025, the cybersecurity world