Weird flex but okay. To me, this press release does more harm than good for Flock's continued PR challeges, because a perfectly sane response might be, oh great: so now Flock gets to decide what's a bug in their own software?
flocksafety.com/blog/flock-aut…
But when you think about it, If you're a software-based company that's serious about managing your own vulnerabilities, you kind of need this authority at some point. It just means they can assign CVE #s to flaws found or reported in Flock products and don't have to rely on another CVE Numbering Authority like MITRE to do it for them. Here's a list of companies that are CNAs. It's pretty extensive:
cve.org/PartnerInformation/Lis…
Flock has been authorized by CISA as a CVE Numbering Authority, giving it a direct role in identifying, cataloging, and disclosing security vulnerabilities in its own products.
Flock Safety