2 ms·

https://www.enisa.europa.eu/news/another-step-forward-towards-responsible-vulnerability-disclosure-in-europe https://www.enisa.europa.eu/news/another-step-forwa

• belter 2y ago
  Other authorities: https://www.cve.org/programorganization/cnas https://www.cve.org/programorganization/cnas The CVE program is really important. This Administration is truly the example of the D.O.G.E. - Department Of Gaffes and Errors
• cookiengineer 2y ago
  > https://euvd.enisa.europa.eu/ https://euvd.enisa.europa.eu/ They already did it. Great! Maybe we can ask them how to contribute to their software, as it seems to be proprietary at the moment? edit: lol, their manifest.json is still the React boilerplate: https://euvd.enisa.europa.eu/manifest.json https://euvd.enisa.europa.eu/manifest.json Their database seems to also only contain fairly recent CVEs (up until 2019? some CVEs are missing...) and not before that
  • numpad0 2y ago
    All major powers have at least one each, some few for different parts of bureaucracy. Most of them are probably minimum budget operations just rsync-ing US CVD but they exist.
  • ozim 2y ago
    We can only hope they will get enough exposure now so they can get funding to fix stuff.
  • rickdeckard 2y ago
    To quote the article "Fourth, national vulnerability databases like China’s and Russia’s, among others, will largely dry up (Russia more than China)." "Fourth [sic], hundreds, if not thousands, of National / Regional CERTs around the world, no longer have that source of free vulnerability intelligence." "Fifth [sic], every company in the world that relied on CVE/NVD for vulnerability intelligence is going to experience swift and sharp pains to their vulnerability management program."
• BrandoElFollito 2y ago
  This is (without any irony) the first useful thing I see from ENISA.