Scworld CISA Vulnerability Response Chief Departing Amid Tracking Framework Challenges
Article Content
- •Lindsey Cerkovnik is leaving CISA after nearly six years.
- •Her departure coincides with challenges facing the CVE Program.
- •The sustainability of vulnerability tracking is under increased scrutiny.
Lindsey Cerkovnik, the branch chief for vulnerability response at CISA, is leaving her position after nearly six years. Her departure comes during a critical period for the Common Vulnerabilities and Exposures (CVE) Program, which faced uncertainty last year when a federal contract nearly expired. This program is vital for tracking software vulnerabilities globally, and its sustainability is under scrutiny as AI increases the volume of discovered flaws. Cerkovnik's tenure included managing vulnerability efforts for industrial control systems and contributing to the Known Exploited Vulnerabilities catalog. The exit raises concerns about who will take over her responsibilities as cybersecurity threats evolve. The National Security Agency and FBI have urged organizations to address critical flaws in widely used software. Cerkovnik's work included responding to significant vulnerabilities like Log4Shell and developing a coordinated vulnerability disclosure platform.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
What is the significance of Cerkovnik's departure?
What challenges is the CVE Program facing?
Who will take over Cerkovnik's responsibilities?
Continue Reading
Critical PHP Vulnerabilities Exploited Before Public Disclosure Two critical vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619, were exploited before their public disclosure on October 21, 2026. Amazon Threat Intelligence reported that attempts to exploit these vulnerabilities began on October 17, 2026, targeting its MadPot honeypot network. Both…