Episode
Vulnerability Overload: The NVD and CVE Challenges Ahead
- Published
- Apr 22, 2025
- Duration seconds
- 3253
- Processing state
not_requested
Actions
POST https://stenobird.com/v1/public/podcasts/infosecurity-magazine-podcast-1181101/episodes/vulnerability-overload-the-nvd-and-cve-challenges-ahead/transcription-requests
Idempotently request low-priority transcript generation for this episode.GET https://stenobird.com/podcast/infosecurity-magazine-podcast-1181101/vulnerability-overload-the-nvd-and-cve-challenges-ahead.md
Read the agent-friendly Markdown representation of this episode resource.
Summary
In this episode of Infosecurity Magazine's podcast, we delve into the critical realm of vulnerability management, exploring the pivotal roles played by two US government-funded security programs that today are under pressure as vulnerability reporting explodes. Join us as we discus the latest developments involving the National Vulnerability Database (NVD), operated by a dedicated team within NIST, which has been under pressure for the last 12 months. We’ll also touch on the recent uncertainty relating to the CVE Program, sponsored by the US Department of Homeland Security (DHS) and CISA and managed by the non-profit MITRE Corporation. These programs serve as essential data sources for organizations worldwide, enabling them to identify, prioritize and remediate vulnerabilities effectively. Our discussion is enriched by insights from expert guests, including: • Brian Martin, former member of the CVE Board (10:23) • Stephen Shaffer, a principal security engineer at a leading pharmaceutical company (26:55) • Rose Gupta, Cyber Exposure Management Lead at AssuredPartners (39:43) Discover more from our sponsor, Vanta, https://www.vanta.com/demo-uk?utm_campaign=emea_generic&utm_source=info-security&utm_medium=podcast Sing up to receive Infosecurity Magazine's weekly newsletter https://www.infosecurity-magazine.com/my-account/login/