Nonprofit foundation seeks to ensure funding for vulnerability database amid CISA turbulence

A nonprofit organization run by board members of MITRE’s Common Vulnerabilities and Exposures Program is searching for alternative funding models for the widely used software security resource, amid concerns over CISA’s long-term ability to provide financial support.

“The reality is that the problem is not solved. We still have one organization that is funding the entire program when we’ve had other organizations ask us how they can help us funding-wise,” Kent Landfield, a vulnerability disclosure leader and longtime industry cyber...