The Common Vulnerabilities and Exposures (CVE) program is the global standard for identifying and naming software vulnerabilities. Established in 1999, CVE assigns unique IDs to known cybersecurity flaws through a network of trusted organizations known as CVE Numbering Authorities (CNAs). CVE data serves as the backbone for global cyber defense collaboration. Sustained investment, transparency, and shared responsibility are essential to ensuring the continuity of this critical program and preventing fragmentation of the global vulnerability landscape.
Read Next
AI Enabled Phishing and the Cyber Insurance Why Stronger Authentication Matters to Underwriters
On October 29 the Center for Cybersecurity Policy hosted a webinar examining how the cyber insurance industry can better address the growing risks posed by AI-enabled phishing.
Cyber Insurance in the Age of AI Phishing
Recent industry and government data cited in the paper indicate that AI-enabled attacks are becoming not only more common, but also more costly. This creates an immediate challenge for businesses and their customers.
Across the Atlantic, Cyber Policy Is Running Into the Same Terminology Problem
The report covers Europe’s cybersecurity industry, investment landscape, and evolving cyber posture, but it also spends considerable time on a more basic question: what actually counts as “offensive cybersecurity” in the first place?
