Red Hat elevated to CNA of Last Resort #cybersecuritynews #hackernews #technews

Summary: The video discusses Red Hat’s announcement on February 26th regarding their designation as a CNA (CVE Naming Authority) of Last Resort. This new role enhances their responsibilities and powers, allowing them to issue CVE numbers and publish associated information regarding vulnerabilities, including cases where other CNAs may withhold this information.

Keypoints:

• Red Hat was first appointed as a CNA in 2002.
• Being named a CNA allows organizations to assign CVE numbers and publish information on vulnerabilities.
• As of now, there are 445 CNAs in existence.
• In 2022, Red Hat was elevated to a CNA route status, responsible for recruiting, training, and governing other CNAs.
• The designation of CNA of Last Resort empowers Red Hat to override other CNAs’ decisions regarding the publication of CVEs.
• This new status grants Red Hat “pseudo powers” within the CVE system.