A letter from MITRE, dated April 15, 2025, has leaked online claimed to be revealed from a reliable source that the organization’s contract to support the Common Vulnerabilities and Exposures (CVE) program is due to expire today, April 16, 2025, potentially threatening the stability of a critical cybersecurity resource. The CVE program, managed by MITRE with funding from the U.S. Department of Homeland Security, has been a cornerstone of global cybersecurity efforts for decades. The letter, addressed to CVE Board Members and signed by Yosry Barsoum, Vice President and Director of MITRE’s Center for Securing the Homeland (CSH), highlights the uncertainty surrounding MITRE’s continued role in maintaining the CVE program and its related initiatives. MITRE is a not-for-profit organization that operates federally funded research and development centers (FFRDCs), including the National Cybersecurity FFRDC, which supports the CVE program. It provides a standardized system for identifying, defining, and cataloging publicly disclosed cybersecurity vulnerabilities, enabling organizations worldwide to address security flaws efficiently. The Common Vulnerabilities and Exposures (CVE) program provides a standardized method for identifying and cataloging cybersecurity vulnerabilities. While the government is reportedly making efforts to continue MITRE’s involvement, Barsoum notes that a break in service could have “multiple impacts” on the CVE ecosystem, also David DiMolfetta’s, a cybersecurity reporter confirmation of the letter’s authenticity. Cyber Security News have contacted MITRE for official comment and will update this article as additional information becomes available.
This Cyber News was published on cybersecuritynews.com. Publication date: Tue, 15 Apr 2025 20:15:22 +0000