NIST can't keep up with vulnerability submissions.

NIST is focusing on enriching cybersecurity vulnerabilities and exposures that appear in CISA’s Known Exploited ...

NIST limits CVE enrichment after 263% surge since 2020, prioritizing KEV and federal software, shifting thousands to “Not ...

The National Institute of Standards and Technology is changing how it analyzes newly disclosed vulnerabilities as it faces a ...

NIST is applying a risk-based model to NVD enrichment, prioritizing CVEs in the CISA KEV catalog and in critical software.

Industry and ad hoc coalitions appear poised to help fill the gap created by NIST's decision to cut back on CVE data ...

The agency will only add enrichment details to CVEs in limited cases going forward, prioritizing known exploited flaws and ...

The National Institute of Standards and Technology (NIST) is revamping how it deals with cybersecurity vulnerabilities amid ...

For more than two years, the database that the entire cybersecurity industry relies on to catalog software flaws has been ...

The US Cybersecurity and Infrastructure Security Agency (CISA) announced on May 8 that it was starting a new software vulnerability enrichment program called ‘Vulnrichment.’ This comes almost three ...

When news broke that funding for the Common Vulnerabilities and Exposures (CVE) database would expire on April 16, panic quickly spread through the infosec community. MITRE, the nonprofit that ...

FIRST CEO Chris Gibson urged global CVE collaboration and integrating AI companies to combat automated cyber threats ...