Stepping up the ENISA's role in Support of EU Vulnerability Services
summary
ENISA describes building an operational EU vulnerability backbone: an EU Vulnerability Database launched April last year, onboarding CNAs after becoming a root CNA in November 2025, and a single reporting platform tied to the Cyber Resilience Act expected by September 2026. Key claims: weaponization time falls to ~1.6 days, median patch time is 32 days, 54% of edge vulnerabilities remain unremediated. Sources for the catalog include CRA vendor reports, member-state incident feeds and honeypot data; automation and CSAF output are planned to speed intake and enrichment.
AI-written summary · about
chapters (10)
- 0:00ENISA introduction
- 1:06ENISA mandate and activities
- 5:24Why urgent vulnerabilities
- 10:19EU legislation on vulnerabilities
- 15:19EU Vulnerability Database launch
- 17:31ENISA as CNA
- 18:33Non-exploited vulnerability catalog
- 21:01Vulnerability enrichment services
- 23:50EU-wide risk reduction
- 25:59Q&A
related talks
58mVulnerability Coordination in the EU
46mLinux Foundation Initiatives Supporting the Implementation of the EU Cyber Resilience Act
30mVulnrichment: Year One
37mGoverning Global Vulnerabilities: Standards for Open Source Resilience
01h 05mWhat It Takes to Lead America’s Vulnerability Management Team
30mThe National Vulnerability Database (NVD) – Where It Is and Where It’s Going
33mFrom Boardrooms to Polling Places: Securing Critical Infrastructure in 2024
22mEU Cyber Resilience Act - A Product Owner’s Approach