The EU cybersecurity agency looks to become the third Top-Level Root CVE Numbering Authority, alongside CISA and MITRE ...

Industry and ad hoc coalitions appear poised to help fill the gap created by NIST's decision to cut back on CVE data ...

NIST’s shift toward selective CVE enrichment creates significant visibility gaps for teams relying solely on the National Vulnerability Database. As AI accelerates vulnerability disclosure rates, ...

New catastrophic risk initiative, CNA authorization, and strategic agentic AI acquisitions accelerate enterprise AI ...

Continuous Threat Exposure Management (CTEM) has moved well past buzzword status. We've talked about this before. It's true ...

For more than two years, the database that the entire cybersecurity industry relies on to catalog software flaws has been falling behind. Now, with researchers demonstrating that hackers can silently ...

The central fact is that ENISA became a CVE Numbering Authority in January 2024, allowing it to assign CVE identifiers and ...

Microsoft has fixed 167 vulnerabilities in its April 2026 Patch Tuesday update, including an actively exploited SharePoint Server zero-day and a Defender flaw.

NIST limits CVE enrichment after 263% surge since 2020, prioritizing KEV and federal software, shifting thousands to “Not ...

As hype builds around Anthropic’s offensive AI model, VulnCheck’s analysis finds just one confirmed CVE tied directly to ...

The agency will only add enrichment details to CVEs in limited cases going forward, prioritizing known exploited flaws and ...