Sign Up for Our Newsletter
Donate

Archive

CVE

CVE at a Crossroads: A Blueprint for the Next 25 Years

Report

CVE at a Crossroads: A Blueprint for the Next 25 Years

The Common Vulnerabilities and Exposures (CVE) Program is a critical public good, yet it is at a crossroads. Established by MITRE with support from the U.S. government, the index of software vulnerability identifiers has been a core element of software security since 1999. But recent funding issues have laid bare fundamental challenges, and without action, the vulnerability identification landscape will fragment. This report provides recommendations for global policymakers on how to reimagine the CVE Program for the next 25 years.
Common Vulnerabilities and Exposures, CVE, Global Vulnerability Catalog, National Vulnerability Management Program, software, vulnerability identification, vulnerability management
October 8, 2025
What should CVE be when it grows up?

Event

August 5, 2025 1:00 pm

What should CVE be when it grows up?

At Security BSides Las Vegas, IST Senior VP Bob Lord moderated a panel on the future of the CVE program. What are the challenges it faces? What governance models should be considered?
CISA, CVE, Hacker Summer Camp, vulnerability management
August 5, 2025
Critical Infrastructure, the CVE Program, K-12 Cyber, and Cyber Civil Defense: IST and Partners at Hacker Summer Camp

Blog

Critical Infrastructure, the CVE Program, K-12 Cyber, and Cyber Civil Defense: IST and Partners at Hacker Summer Camp

It’s that time of year again: IST is headed to Las Vegas for DEF CON, BSides Las Vegas, and Black Hat! We join our colleagues in the desert each year to share our research, learn from technical experts, and connect with our growing network of stakeholders and partners from across the cyber ecosystem. Here's where you can find us in Las Vegas this August.
Black Hat, BSides, conference, critical infrastructure, CVE, Cyber Civil Defense, DEF CON, Hacker Summer Camp
July 28, 2025