CISA Extends Funding To Ensure 'No Lapse in Critical CVE Services' 19
CISA says the U.S. government has extended funding to ensure no continuity issues with the critical Common Vulnerabilities and Exposures (CVE) program. From a report: "The CVE Program is invaluable to cyber community and a priority of CISA," the U.S. cybersecurity agency told BleepingComputer. "Last night, CISA executed the option period on the contract to ensure there will be no lapse in critical CVE services. We appreciate our partners' and stakeholders' patience."
The announcement follows a warning from MITRE Vice President Yosry Barsoum that government funding for the CVE and CWE programs was set to expire today, April 16, potentially leading to widespread disruption across the cybersecurity industry. "If a break in service were to occur, we anticipate multiple impacts to CVE, including deterioration of national vulnerability databases and advisories, tool vendors, incident response operations, and all manner of critical infrastructure," Barsoum said.
The announcement follows a warning from MITRE Vice President Yosry Barsoum that government funding for the CVE and CWE programs was set to expire today, April 16, potentially leading to widespread disruption across the cybersecurity industry. "If a break in service were to occur, we anticipate multiple impacts to CVE, including deterioration of national vulnerability databases and advisories, tool vendors, incident response operations, and all manner of critical infrastructure," Barsoum said.
Re: (Score:2, Offtopic)
Please get 4Chan back up. So we can return this sort of traffic to where it belongs.
CISA critical CVE services .. (Score:3)
CERT advisories (1988) used do this before the more efficient government got involved.
Re: CISA critical CVE services .. (Score:2)
CERT advisories (1988) used do this before the more efficient government got involved.
CERT has always been federally funded, and is still doing its thing today.
I'm puzzled how an entire god damned military branch is justified for weather satellites and eyes in the sky, but we have a bone to pick here with information security of all things. WTaF is up with that.
Trump Making Everyone Else Look Great (Score:1, Troll)
Re: (Score:2)
Interesting analysis. Was that spending under a Trump Administration budget, or extension from the prior administration?
Re: (Score:2)
Re: (Score:2)
Couple things: There are only certain circumstances where an Administration can spend ABOVE budgeted spending levels without congressional authorization. I'm not aware of that being the case with this administration, but I'm open to citations if in fact they exist.
The alternative would be that the current Administration is spending less than the current Budget appropriation, but still more more historical figures. This is where an important distinction needs to be made. Congress "Appropriates" funds und
Re:Trump Making Everyone Else Look Great (Score:4, Informative)
The detail here is that, as I read the U.S. Constitution (IANAL,) unless Congress specifically documents that a certain amount of Appropriated funds must be spent on a given item, then the Administration may in fact spend less than the Appropriated amount.
The president choosing not to spend money allocated by Congress is called "Impoundment". A decent writeup from the National Constitution Center, here [constitutioncenter.org].
After some chicanery from the Nixon administration in the 70s Congress passed legislation mandating that the executive spend allocated funding. If the executive wants to delay (or cancel entirely) such funding, they must notify Congress and Congress can choose to override that decision. The Supreme court has upheld this law.
IANAL either, so this does raise some questions I can't answer about technicalities along the lines of your hypothetical (if Congress allocates $50bn to buy stealth bombers and the program only costs $49,999,000,000, must the executive either find a way to pad the cost of the program by $1m, or explicitly ask Congress for permission not to spend it?), but in general it seems the president must at least spend the money or provide Congress with a compelling reason why they can't/won't/shouldn't.
Re: (Score:2)
I agree on the impoundment rule, but my reading of that is a little different than what the pundits seem to have indicated. I think your stealth bomber example is a good one, in that Congress Appropriates $X Billion for Stealth Bombers, but so long as they get their bombers, the Impoundments rule is not broken. I think it gets a lot less clear when Congress appropriates general funds for something like USAID (just because it's so hotly debated these days.) Congress did not specifically appropriate funds f
Re: (Score:2)
I think it gets a lot less clear when Congress appropriates general funds for something like USAID (just because it's so hotly debated these days.) Congress did not specifically appropriate funds for some version of overseas Sesame Street, but rather appropriated a generally directed agency fund. I do not think that not spending the entire general-allotment constitutes impoundment...not spending on a program that doesn't exist and wasn't specifically mandated is hardly withholding funds.
I think what you describe applies on the micro (choosing not to fund an overseas version of sesame street) but not the macro (choosing not to fund the agency at all). If the executive chooses to slash programs and not replace them with other programs that align with the administration's policy objectives, there's a process for that: the president can notify Congress, and Congress can choose whether or not to object to decision to not spend the funds.
Re: (Score:2)
Russian asset? (Score:1)
If Trump was really working for Russia and intent on breaking the US, what would he be doing differently?
Re: (Score:2)
He'd be a lot more careful so that he doesn't blow his cover perhaps.
Re: (Score:2)
"Breaking the US"
"The complete inability of society at large to NOT follow trends" is what broke the US.
IDKWTAM* (Score:2)
Boy, I'm real concerned about CISA getting their funding for CVE... whatever the hell that means.
*I Don't Know What These Acronyms Mean
Re: (Score:2)
I don't understand what you typed.