It’s impressive that the number of CVEs issued the last two years has skyrocketed, given how badly DOGE gutted the cybersecurity [0] agencies. Unfortunately we don’t know how huge the backlog may have since grown

[0] https://www.securityweek.com/mitre-signals-potential-cve-pro...

▲

SimianSci 4 hours ago | parent | next [-]

DOGE was impressively criminal. The team tried to remove the CVE reporting system entirely and only failed to do so because of intevention from the military and several agencies.

▲

MetaWhirledPeas 3 hours ago | parent | next [-]

> DOGE was impressively criminal. The team tried to remove the CVE reporting system

Honest question: what would be the criminal purpose for that?

	▲	farnsworth an hour ago \| parent \| next [-]
		I think the argument would just be, “why should the government do this when someone else could be making money off it”
	▲	kridsdale1 2 hours ago \| parent \| prev \| next [-]
		Watch the world burn.
	▲	nullsanity 3 hours ago \| parent \| prev [-]
		[dead]

▲

jdironman an hour ago | parent | prev [-]

[dead]

▲

vasco 6 hours ago | parent | prev [-]

Do the agencies do any research to find CVEs? Or do they run a mostly cacheable website where they simply get posted?

▲

danso 5 hours ago | parent [-]

The CVE system is far, far from perfect and NIST has faced increasing criticism (even before 2025) about its ability to triage and process the backlog. But I don't think their role is limited to simply posting what’s sent to them?

https://www.securityweek.com/cve-and-nvd-a-weak-and-fracture...

▲

vasco 5 hours ago | parent [-]

They have nothing to do with the number is my point. They don't uncover anything.

	▲	theteapot 4 hours ago \| parent [-]
		"They"? MITRE runs cve.org under contract by CISA.