Colleagues, The CVE Program is happy to announce two (2) new CNAs: Organization Name: Integrated DNA Technologies, Inc. Org Short Name: IDT-DNA Organization Location: USA Scope: Vulnerabilities within IDT-manufactured products, software, and services that are in-service. Root: CISA ICS Top-Level Root: CISA Disclosure Policy location: https://www.idtdna.com/pages/support/vulnerability-disclosure-process/ Advisory location: https://www.idtdna.com/pages/support/vulnerability-disclosure-process/known-vulnerabilities Public point of contact: productsecur...@idtdna.com<mailto:productsecur...@idtdna.com> CNA Type: Vendor Organization Name: T-Mobile US Org Short Name: TMUS Organization Location: USA Scope: All T-Mobile US products (including end-of-life/end-of-service products), as well as vulnerabilities in third-party software/hardware discovered by T-Mobile US that are not in another CNA’s scope. Root: CISA ICS Top-Level Root: CISA Disclosure Policy location: https://bugcrowd.com/engagements/t-mobile Advisory location: https://t-mobile.github.io/ Public point of contact: secur...@t-mobile.com<mailto:secur...@t-mobile.com> CNA Type: Vendor, Researcher In addition, as of March 11, 2025, the General Electric (Gas Power) CNA, which became a CVE Program partner in 2022, has been replaced by:
Organization Name: GE Vernova Org Short Name: GE_Vernova Organization Location: USA Scope: All GE Vernova products. Root: CISA ICS Top-Level Root: CISA Disclosure Policy location: https://www.gevernova.com/gas-power/products/digital-and-controls/cybersecurity/vulnerability-response Advisory location: https://www.gevernova.com/gas-power/products/digital-and-controls/cybersecurity/security-advisories Public point of contact: gev.ps...@ge.com<mailto:gev.ps...@ge.com> CNA Type: Vendor Total CNAs: 447 CNAs (444 CNAs and 3 CNA-LRs) Total Countries: 40 (+ 1 no country affiliation) Respectfully, CVE Program Secretariat cve-prog-secretar...@mitre.org<mailto:cve-prog-secretar...@mitre.org> [A picture containing text, clipart Description automatically generated]