NIST Announces Policy Change: National Vulnerability Database to Stop Enriching Most CVEs
By
mooreds
Toasted golden, schmeared with insight. Top of the rack.
Summary
The US National Institute of Standards and Technology (NIST) has announced a significant policy change for the National Vulnerability Database (NVD), discontinuing the enrichment of most Common Vulnerabilities and Exposures (CVEs). This decision marks a major shift in how vulnerability information is processed and disseminated, potentially impacting cybersecurity professionals, organizations, and the broader security ecosystem who rely on NVD's enriched data for vulnerability management and risk assessment.
Key quotes
· 4 pulledThe US National Institute of Standards and Technology announced on Wednesday a new policy regarding the US National Vulnerability Database
NIST gives up enriching most CVEs
This newsletter is brought to you by Risky Bulletin
April 17, 2026
You might also wanna read
Phishing Campaign Targets Signal Users by Stealing Backup Recovery Keys
A new wave of phishing attacks is targeting Signal users by impersonating the app's support team. Hackers send messages inside Signal claimi
cybersecuritynews.com·58m ago
New phishing campaign targets Signal users to steal chat backup recovery keys
Hackers are targeting Signal users in a new phishing campaign that attempts to steal their chat backups. The attackers pose as Signal's supp
techcrunch.com·1h ago
Weekly cybersecurity roundup: FortiClient EMS infostealer, Trend Micro Apex One exploit, and crypto payment security
A weekly roundup of cybersecurity news, featuring an interview with Coinflow's CISO about crypto payment security under AI-driven threats, c
helpnetsecurity.com·2h ago
CISA Adds Palo Alto Networks PAN-OS Authentication Bypass Vulnerability to Known Exploited Vulnerabilities Catalog
CISA has added a new vulnerability (CVE-2026-0257) to its Known Exploited Vulnerabilities (KEV) Catalog, affecting Palo Alto Networks PAN-OS
cisa.gov·5h agoCISA Adds Palo Alto Networks PAN-OS Authentication Bypass Vulnerability to Known Exploited Vulnerabilities Catalog
CISA has added a new vulnerability (CVE-2026-0257) to its Known Exploited Vulnerabilities (KEV) Catalog, affecting Palo Alto Networks PAN-OS
cisa.gov·5h ago
Microsoft warns of crypto mining malware disguised as fake downloads of popular PC utilities
Microsoft's Windows Defender team has uncovered a cryptocurrency mining campaign targeting PC enthusiasts. Scammers are manipulating search
techspot.com·13h ago