Get the latest tech news
The NIST Finally Hires a Contractor to Manage CVEs
Security experts have been frustrated because no one was managing the Common Vulnerabilities and Exposures security reports. Good news: The NIST has hired a company to manage the backlog. Bad news: The company has no experience with this kind of security work.
However, it’s not uncommon for businesses in the government contracting sphere to hire the expertise they need. That score determines whether the IT security crew shrugs its collective shoulders (3.9 or below) or calls “all hands on deck” to patch or remediate the problem as soon as possible (9.0 or higher). Dan Lorenc, CEO of Chainguard, a software supply chain security company, recently wrote, “ the ridiculous rash of awful CVEs ” resulted from “scraping old issues and commits to file these in an automated fashion, without ever getting maintainers involved.”
Or read this on r/technology