Jamf Announces it has been authorized by the CVE Program as a CVE Numbering Authority (CNA)
On June 25, 2024, Jamf (NASDAQ: JAMF), a leader in managing and securing Apple devices at work, announced its authorization as a CVE Numbering Authority (CNA) by the CVE Program. The CVE Program is an international effort to identify and catalog cybersecurity vulnerabilities. Henry Patel, Jamf's Chief Strategy Officer, emphasized that this designation reinforces Jamf's commitment to security. Jamf can now submit and update CVE records for its products, tools, and open-source projects, enhancing their ability to inform the community about security issues. This move aims to help organizations mitigate vulnerabilities and collaborate more effectively on cybersecurity matters.
- Jamf authorized as a CVE Numbering Authority (CNA).
- Strengthens Jamf's commitment to cybersecurity.
- Ability to submit and update CVE records enhances product security.
- Reinforces Jamf's standing in the security research community.
- No significant negative aspects reported.
MINNEAPOLIS, June 25, 2024 (GLOBE NEWSWIRE) -- Jamf (NASDAQ: JAMF), the standard in managing and securing Apple at work, announced it has been authorized by the CVE Program as a CVE Numbering Authority (CNA). CVE is an international, community-based effort with a mission to identify, define and catalog publicly disclosed cybersecurity vulnerabilities.
“Serving as an authorized CVE Numbering Authority reinforces Jamf’s commitment to helping organizations maintain the most secure Jamf environment,” said Henry Patel, chief strategy officer, Jamf. “Coupled with a leading threat research team, we believe Jamf will continue to have a meaningful impact on the security research community as a whole and ultimately help keep our customers safe, secure and productive.”
The CVE list helps organizations keep up to date on the latest security threats, create action plans to address vulnerabilities in their system and collaborate with other cybersecurity professionals while working with consistent information. Vulnerabilities listed in the CVE database are also added to the U.S. National Vulnerability Database (NVD).
Jamf can now seamlessly submit and update CVE records to the CVE list within the Jamf product scope, including its products, tools and open-source projects. This way, the company can better inform the community about potential issues to help reduce the impact a vulnerability may have. In addition to adding its own entries, Jamf leverages the CVE list to identify potential issues in the third-party libraries used in its products too.
About the CVE Program
The mission of the Common Vulnerabilities and Exposures (CVE®) Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. There is one CVE Record for each vulnerability in the catalog. The vulnerabilities are discovered then assigned and published by organizations from around the world that have partnered with the CVE Program. Partners publish CVE Records to communicate consistent descriptions of vulnerabilities. Information technology and cybersecurity professionals use CVE Records to ensure they are discussing the same issue, and to coordinate their efforts to prioritize and address the vulnerabilities.
The CVE Program is sponsored by the Cybersecurity and Infrastructure Security Agency (CISA), of the U.S. Department of Homeland Security (DHS) and is operated by the MITRE Corporation in close collaboration with international industry, academic, and government stakeholders.
About Jamf
Jamf’s purpose is to simplify work by helping organizations manage and secure an Apple experience that end users love and organizations trust. Jamf is the only company in the world that provides a complete management and security solution for an Apple-first environment that is enterprise secure, consumer simple and protects personal privacy. To learn more, visit www.jamf.com.
Media Contact:
Liarna La Porta | media@jamf.com
Investor Contact:
Jennifer Gaumond | ir@jamf.com
FAQ
What did Jamf announce on June 25, 2024?
What is the significance of Jamf becoming a CVE Numbering Authority?
How does the CVE designation benefit Jamf's customers?
What is the impact of Jamf's CNA status on the security research community?