Piotr P. Karwasz
@piotr.karwasz.org
160 followers
350 following
49 posts
Java & Open Source expert | Apache Software Foundation member | VP Logging Services & Ecma Relations | Father of three wonderful daughters
Posts
Media
Videos
Starter Packs
Reposted by Piotr P. Karwasz
![Press release from the CVE Foundation:
CVE Foundation Launched to Secure the Future of the CVE Program
[Bremerton, Washington] – The CVE Foundation has been formally established to ensure the long-term viability, stability, and independence of the Common Vulnerabilities and Exposures (CVE) Program, a critical pillar of the global cybersecurity infrastructure for 25 years.
Since its inception, the CVE Program has operated as a U.S. government-funded initiative, with oversight and management provided under contract. While this structure has supported the program’s growth, it has also raised longstanding concerns among members of the CVE Board about the sustainability and neutrality of a globally relied-upon resource being tied to a single government sponsor.
This concern has become urgent following an April 15, 2025 letter from MITRE notifying the CVE Board that the U.S. government does not intend to renew its contract for managing the program. While we had hoped this day would not come, we have been preparing for this possibility.
In response, a coalition of longtime, active CVE Board members have spent the past year developing a strategy to transition CVE to a dedicated, non-profit foundation. The new CVE Foundation will focus solely on continuing the mission of delivering high-quality vulnerability identification and maintaining the integrity and availability of CVE data for defenders worldwide.
“CVE, as a cornerstone of the global cybersecurity ecosystem, is too important to be vulnerable itself,” said Kent Landfield, an officer of the Foundation. “Cybersecurity professionals around the globe rely on CVE identifiers and data as part of their daily work—from security tools and advisories to threat intelligence and response. Without CVE, defenders are at a massive disadvantage against global cyber threats.”
The formation of the CVE Foundation marks a major step toward eliminating a single point of failure in the vulnerability management ecosystem and ensuring…](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:xjkqe2uyxc2tpimt3b2vyqhg/bafkreihltvjroekt6vveygg4rqdn5e6worxwdpvjiqq2sycealimufqlqa@jpeg)
Piotr P. Karwasz
@piotr.karwasz.org
· Apr 16
GCVE - Global CVE Allocation System Announced
Introducing the Global CVE (GCVE) Allocation System (https://gcve.eu), a new decentralized approach to identifying and numbering security vulnerabilities. GCVE empowers independent GCVE Numbering Auth...
gcve.eu
Reposted by Piotr P. Karwasz
Piotr P. Karwasz
@piotr.karwasz.org
· Apr 16
Reposted by Piotr P. Karwasz
Piotr P. Karwasz
@piotr.karwasz.org
· Mar 20
Apache Kafka 4.0.0 is released. Check out the release notes here: dlcdn.apache.org/kafka/4.0.0/...
Below is a summary of the JIRA issues addressed in the 4.0.0 release of Kafka. For full documentation of the release, a guide to get started, and information about the project, see the Kafka project site.
dlcdn.apache.org
Piotr P. Karwasz
@piotr.karwasz.org
· Mar 15
Piotr P. Karwasz
@piotr.karwasz.org
· Mar 5
Piotr P. Karwasz
@piotr.karwasz.org
· Mar 5
Piotr P. Karwasz
@piotr.karwasz.org
· Feb 22
[New Blog] FOSDEM 2025 Recap: Open Source Contributors Unite to Collaborate and Help Advance Apache Software Projects https://buff.ly/3X4GZ2H
#opensource #FOSDEM
#opensource #FOSDEM
Piotr P. Karwasz
@piotr.karwasz.org
· Feb 20
Reposted by Piotr P. Karwasz
Reposted by Piotr P. Karwasz
Piotr P. Karwasz
@piotr.karwasz.org
· Feb 10
Piotr P. Karwasz
@piotr.karwasz.org
· Feb 9
Reposted by Piotr P. Karwasz
