Continued thread
Recent searches
Search options
Administered by:
#ENISA
0 posts0 participants0 posts today
#CVE fallout: The splintering of the standard #vulnerability tracking system has begun
Earlier this week, CVE program faced doom as the #US #government discontinued funding for #MITRE, the non-profit that operates the program. Uncle Sam U-turned at the very last minute.
Meanwhile, the #EU is rolling its own. #EuropeanUnion Agency for #Cybersecurity (#ENISA) developed and maintains this alternative, which is known as the #EUVD, or the European Union Vulnerability Database.
https://www.theregister.com/2025/04/18/splintering_cve_bug_tracking/
The Register · CVE fallout: The splintering of the standard vulnerability tracking system has begun
2019 ist lange her - der EU #Cybersecurity Act (#CSA) soll nun aktualisiert werden und es wurde eine öffentliche Konsultation gestartet.
In erster Linie enthält der CSA Befugnisregelungen für die #ENISA und legt die rechtliche Grundlage zur Einführung der EU Cybersecurity Certification Schemes als einheitliche EU-weite Zertifizierungsmuster für produktübergreifende Schlüsseltechnologien.
Die öffentliche Konsultation läuft bis zum 20.06.2025: https://digital-strategy.ec.europa.eu/en/news/commission-opens-consultation-revising-eu-cybersecurity-act
Shaping Europe’s digital futureCommission opens consultation on revising EU Cybersecurity ActIn an effort to strengthen the EU’s resilience against rising cyber threats, the Commission seeks input to evaluate and revise the 2019 Cybersecurity Act. This initiative reflects the Commission’s ongoing commitment to simplifying rules.
“I love deadlines. I love the whooshing noise they make as they go by.” – Douglas Adams
Happy NIS2 deadline wooshing by day!
“Article 3(4) of Directive (EU) 2022/2555 refers to Article 3(3) of that Directive, which requires the Member States to establish a list of essential and important entities, as well as entities providing domain name registration services, by 17 April 2025. Member States must review and, where appropriate, update that list regularly and at least every two years thereafter.”
“According to Article 3(5) of Directive (EU) 2022/2555, by 17 April 2025 and every two years thereafter, Member States must notify the Commission and the Cooperation Group, at least the number of essential and important entities listed pursuant to Article 3(3) of that Directive for each sector and subsector referred to in Annexes I and II of the Directive”
The European Union Agency for Cybersecurity (ENISA) launched the European Union Vulnerability Database (EUVD) website https://euvd.enisa.europa.eu/
Nach dem drohenden Aus der #CVE-Liste startet die EU mit der eigenen Schwachstellendatenbank #EUVD.
Die Plattform der der EU-#Cybersicherheitsbehörde #ENISA soll laut NIS2-Richtlinie für mehr IT-Sicherheit in Europa sorgen.
Parallel arbeiten Initiativen an dezentralen und unabhängigen Lösungen. Eine mögliche Vertragsverlängerung durch die US-Behörde #CISA könnte den Dienst vorerst sichern.
heise online · CVE-Aus abgewendet, Schwachstellendatenbank der EU geht an den Start
More from 
Dr. Christopher Kunz
#euvd from #enisa looks line a good alternative!
https://euvd.enisa.europa.eu/
euvd.enisa.europa.euEUVDEuropean Vulnerability Database
European Union Vulnerability Database (EUVD)
euvd.enisa.europa.euEUVDEuropean Vulnerability Database
Replied in thread
@cmeerbeek All the credits go to the team of #ENISA I just look that #CRA and wait for all the things mentioned to materialize :D
Replied in thread
@bkastl
#ENISA is a total joke. But who can do something about their web presence that didn't fuck it up equally bad? @EUCommission ?
Have you been to e.g. enisa.europe.eu itself recently?
They've literally a capture of "13 +3" on the "recruitment inquiry" form but some AI-proof one on the "media inquiry" one.
Continued thread
Personally, I wish another more reliable organisation will pick up the baton where CISA dropped it. Candidates would be the @EUCommission with its own cybersecurity agency ENISA, the UN, or an NGO with international funding.
4/4
FYI: ENISA PDF about the Space Threat Landscape @ https://www.enisa.europa.eu/sites/default/files/2025-03/Space_Threat_Landscape_Report_fin.pdf
Der neue #ENISA-#Lagebericht zur #Weltraum #Cybersecurity ist da: Auf 122 Seiten werden vor allem die Herausforderungen in der #Cybersicherheit für Satelliten thematisiert: Die Abhängigkeit von weltweiten Lieferketten, der Umgang mit Legacy Systemen, Datenverschlüsselung und sichere Kommunikation sowie APT-Angriffe auf die Kommunikationsinfrastruktur. Vorgeschlagen wird deshalb eine Referenzarchitektur u.a. zu "Security by Design" aus einer multidisziplinären Perspektive:
https://www.enisa.europa.eu/sites/default/files/2025-03/Space_Threat_Landscape_Report_fin.pdf
ENISA Probes Space Threat Landscape in New Report – Source: www.infosecurity-magazine.com https://ciso2ciso.com/enisa-probes-space-threat-landscape-in-new-report-source-www-infosecurity-magazine-com/ #rssfeedpostgeneratorecho #InfoSecurityMagazine #InfosecurityMagazine #CyberSecurityNews #ENISA
CISO2CISO.COM & CYBER SECURITY GROUP · ENISA Probes Space Threat Landscape in New Report – Source: www.infosecurity-magazine.comSource: www.infosecurity-magazine.com - Author: The EU’s leading cybersecurity agency has published a detailed new report outlining the threat landscape a
Cybersecure #satellites: EU authority emphasises supply chain security, zero trust model: "Identifying counterfeit, fraudulent, and malicious equipment, are focal points for safeguarding against potential #threats," reads #ENISA's report https://www.euractiv.com/section/tech/news/cybersecure-satellites-eu-authority-emphasises-supply-chain-security-zero-trust-model/?utm_source=mastodon&utm_medium=dlvr.it
Mehr #Vereinheitlichung in der Umsetzung von #NIS2: In vielen Gesprächen wird immer wieder laut, dass die unterschiedliche nationalstaatliche Umsetzung von NIS2 zu Reibungsverlusten und Mehraufwänden bei den betroffenen Unternehmen führt. Dem will jetzt die #EU entgegentreten. In einem ersten Schritt hat die #ENISA gestern nun einen lesenswerten grenzüberschreitenden Bericht zu den #Reifegraden und der #Kritikalität relevanter NIS2-Sektoren veröffentlicht:
#cybersecurity
https://www.enisa.europa.eu/publications/enisa-nis360-2024
Il Piano dell’UE per rafforzare la cybersecurity in campo sanitario: La crescente digitalizzazione sta profondamente trasformando il settore sanitario, introducendo innovazioni come cartelle cliniche elettroniche, telemedicina e strumenti...
#Federprivacy #PasqualeMancino #intelligenzaartificiale #cybersecuritysistemasanitario #ENISA http://dlvr.it/TJHTy5
Hm, "NvdApiException: Failed to parse NVD data"
I think Europe should host its own https://nvd.nist.gov/
#enisa ?
nvd.nist.govNVD - Home