Common Weakness Enumeration (CWE) Program
LightNews LightNews
cweprogram.bsky.social
Common Weakness Enumeration (CWE) Program
@cweprogram.bsky.social
32 followers 1 following 44 posts
Account maintained by the Common Weakness Enumeration (CWE™) Program to update the community on CWE-related announcements.
https://cwe.mitre.org
Posts Replies Media Videos
cweprogram.bsky.social
#CWE 4.18 is now available! This latest release includes 1 new view related to the recently released “2025 Most Important Hardware Weaknesses,” 1 new AI weakness, usability improvements for 14 CWE entries including diagrams & more

cwe.mitre.org/news/archive...
New Common Weakness Enumeration (CWE™) List Version Released!
September 10, 2025 at 12:03 PM
cweprogram.bsky.social
The #CWE “2025 Most Important Hardware Weaknesses (MIHW)” has arrived!

See what’s included, check out the new methodology, and more!

#hardware #hw cwe.mitre.org/topHW/
Logo image of the CWE™ "2025 Most Important Hardware Weaknesses (MIHW)," which empowers organizations with the knowledge to proactively strengthen hardware security and reduce risks at the source.
August 20, 2025 at 4:16 PM
cweprogram.bsky.social
Hear how the CVE Numbering Authority (#CNA) community is enhancing #CVE Records with Root Cause Mapping (RCM) of their CVEs to #CWEs, challenges & practical solutions, & how an LLM can help in this video from #VULNCON25

youtu.be/TH1tGO15K24
Vulnerability Root Cause Mapping with CWE: Challenges, Solutions, and Insights from Grounded LLM-based Analysis
July 2, 2025 at 2:04 PM
cweprogram.bsky.social
Learn about CWE’s most important problems and where they fit within the challenges faced by the broader #vulnerabilitymanagement / #softwaresecurity ecosystem in this video from #VULNCON25

youtu.be/RcR-EFSptnQ #CVE #CWE
“Hard Problems in CWE, and What it Tells us about Hard Problems in the Industry,” presentation from “CVE/FIRST VulnCon 2025.” Speaker: CWE Program Technical Lead Steve Christey Coley.
June 19, 2025 at 2:32 PM
cweprogram.bsky.social
Thank you so much to everyone who attended the #CWE talks at the #VulnCon25 conference!!!

We’re already looking forward to next year’s event!

#CVE #FIRST cwe.mitre.org
CVE/FIRST VulnCon: Collaborate | Communicate | Coordinate
April 15, 2025 at 3:35 PM
cweprogram.bsky.social
Day 4 of “CVE/FIRST VulnCon 2025”!

Today’s agenda for all 4 tracks:
first.org/conference/v...

#CWE #VulnerabilityManagement #Vulnerability #CVE #FIRST #VulnCon25
The CVE Program and FIRST are co-hosting "VulnCon 2025" at the McKimmon Center in Raleigh, North Carolina, USA, on April 7-10, 2025.
April 10, 2025 at 1:31 PM
cweprogram.bsky.social
Day 3 of “CVE/FIRST VulnCon 2025”!

Today’s agenda for all 3 tracks: first.org/conference/v...

#CWE #VulnerabilityManagement #Vulnerability #CVE #FIRST #VulnCon25
The CVE Program and FIRST are co-hosting "VulnCon 2025" at the McKimmon Center in Raleigh, North Carolina, USA, on April 7-10, 2025.
April 9, 2025 at 1:36 PM
cweprogram.bsky.social
Want to know the top ten #CWEs in CISA’s “Known Exploited Vulnerabilities (#KEV) Catalog”?

The “2024 CWE Top 10 KEV Weaknesses” list is now available on the CWE website!

List - cwe.mitre.org/top25/archiv...
Key Insights - cwe.mitre.org/top25/archiv...
Methodology - cwe.mitre.org/top25/archiv...
Tree Map of the https://cwe.mitre.org/top25/archive/2024/2024_kev_list.html
April 9, 2025 at 1:35 PM
cweprogram.bsky.social
Day 2 of “CVE/FIRST VulnCon 2025”!

Today’s agenda for all 7 tracks: first.org/conference/v...

#CWE #VulnerabilityManagement #Vulnerability #CVE #FIRST #VulnCon25
The CVE Program and FIRST are co-hosting "VulnCon 2025" at the McKimmon Center in Raleigh, North Carolina, USA, on April 7-10, 2025.
April 8, 2025 at 2:45 PM
cweprogram.bsky.social
Day 1 of “CVE/FIRST VulnCon 2025” is here!

Today’s agenda for all 5 tracks: first.org/conference/v...

#CWE #VulnerabilityManagement #Vulnerability #CVE #FIRST #VulnCon
The CVE Program and FIRST are co-hosting "VulnCon 2025" at the McKimmon Center in Raleigh, North Carolina, USA, on April 7-10, 2025.
April 7, 2025 at 1:15 PM
cweprogram.bsky.social
CWE 4.17 is now available! This latest release includes 3 new weaknesses, major updates to an #AI related weakness + extensive usability improvements to the #CWE website landing page, website navigation, CWE entry page renderings, tables, lists, & more

cwe.mitre.org/news/archive...
New Common Weakness Enumeration (CWE™) List Version Released!
April 3, 2025 at 2:56 PM
cweprogram.bsky.social
“CVE/FIRST VulnCon 2025” is next week, April 7-10!

There are four #CWE talks on the agenda and it’s not too late to attend!

Virtual admission registration (US $100.00) closes on April 4, so register today at first.org/conference/v...
The CVE Program and FIRST will co-host "VulnCon 2025" next week at the McKimmon Center in Raleigh, North Carolina, USA, on April 7-10, 2025. Virtual admission registration, which closes on April 4, 2025, is US $100.00.
April 2, 2025 at 3:31 PM
cweprogram.bsky.social
Check out the four #CWE talks in the agenda for “CVE/FIRST VulnCon 2025” on April 7-10, 2025!
www.first.org/conference/v...

Virtual & In-person registration available. Register today!

#CVE #FIRST #VulnerabilityManagement #Vulnerability #Cybersecurity
The CVE Program and FIRST will co-host "VulnCon 2025" at the McKimmon Center in Raleigh, North Carolina, USA, on April 7-10, 2025. Registration, both virtual and in-person, is open on the FIRST website.
March 10, 2025 at 5:59 PM
cweprogram.bsky.social
CWE 4.16 is now available!

This latest release includes 1 new view to support the release of the “2024 CWE Top 25 Most Dangerous Software Weaknesses,” 1 new #AI related to prompt injection + continued CWE content usability improvements

cwe.mitre.org/news/archive...
Common Weakness Enumeration (CWE™) Version 4.16 now available!
November 20, 2024 at 4:04 PM
cweprogram.bsky.social
The 2024 #CWE Top 25 Most Dangerous #Software Weaknesses list is now available!

See the the most severe and prevalent weaknesses behind the 31,770 #CVE Records in this year’s dataset.
Take a look and share your thoughts!

cwe.mitre.org/top25/
2024 CWE Top 25 Most Dangerous Software Weaknesses
November 20, 2024 at 4:02 PM