CISA-ENISA Joint Messaging
summary
CISA affirms 25 years as CVE sponsor and runs the Known Exploited Vulnerabilities (KEV) catalog and SSVC work, handling thousands of coordinated disclosure cases and 250–300 open CVD cases at once; CISA pilots Vuln Enrichment to fill missing CVE fields. ENISA becomes a root CNA (Nov 2025), is onboarding CNAs, builds an EU vulnerability database and a Single Reporting Platform (target 9/11), and commits to interoperable tooling, infrastructure modernization, federation and a shift from growth to a data-and-experience quality era.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 7:46Vulnerability reporting challenges
- 15:50ENISA's CVE program role
- 23:39Program diversification
- 30:40Building trust through partnerships
- 37:41Modernizing CVE infrastructure
- 44:28Summary and Q&A
related talks
58mVulnerability Coordination in the EU
01h 00mCVE Records: The Cybersecurity Glow-Up You Didn’t Know You Needed
56mCISA’s North Star Vision for the CVE Program
01h 05mWhat It Takes to Lead America’s Vulnerability Management Team
30mVulnrichment: Year One
58mCISA’s Known Exploited Vulnerabilities (KEV) Catalog
32mOperationalizing SSVC
40mHow CISA Is Charting a Path Toward Defensible Infrastructure