Comment by danso
9 hours ago
It’s impressive that the number of CVEs issued the last two years has skyrocketed, given how badly DOGE gutted the cybersecurity [0] agencies. Unfortunately we don’t know how huge the backlog may have since grown
[0] https://www.securityweek.com/mitre-signals-potential-cve-pro...
DOGE was impressively criminal. The team tried to remove the CVE reporting system entirely and only failed to do so because of intevention from the military and several agencies.
> DOGE was impressively criminal. The team tried to remove the CVE reporting system
Honest question: what would be the criminal purpose for that?
I think the argument would just be, “why should the government do this when someone else could be making money off it”
Sabotage the government to further the interests of their employer
Watch the world burn.
State sponsored sabotage.
[dead]
[dead]
Do the agencies do any research to find CVEs? Or do they run a mostly cacheable website where they simply get posted?
The CVE system is far, far from perfect and NIST has faced increasing criticism (even before 2025) about its ability to triage and process the backlog. But I don't think their role is limited to simply posting what’s sent to them?
https://www.securityweek.com/cve-and-nvd-a-weak-and-fracture...
They have nothing to do with the number is my point. They don't uncover anything.
1 reply →