Nextgov

CISA wants more international involvement in cyber vulnerability catalog, official says

The Cybersecurity and Infrastructure Security Agency wants to involve more international partners in overwatching a long-standing cyber vulnerability cataloging project, which narrowly avoided vast ...
Nextgov

CISA weighs ‘alternative funding sources’ to preserve cyber vulnerability-tracking project

The Cybersecurity and Infrastructure Security Agency is exploring more diversified funding mechanisms to help cover the cost of a bedrock vulnerability cataloging program that’s been relied upon by ...
CSO Online

CISA urges software vendors to formalize vulnerability disclosure programs

Joint guidance outlines how software vendors should work with security researchers as AI accelerates vulnerability discovery ...
TechRepublic

CISA Flags 2-Year-Old Oracle WebLogic Vulnerability as Actively Exploited

CISA added Oracle WebLogic flaw CVE-2024-21182 to its KEV catalog, giving federal agencies until June 4 to patch exposed servers. A patch that should have retired an Oracle WebLogic vulnerability two ...
AFCEA

CISA’s Coordinated Vulnerability Disclosure Process

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) runs a program that coordinates cybersecurity vulnerabilities in products and services. This includes new vulnerabilities in industrial ...