In the infosec world we continually preach about “defense in depth,” or layered security. The idea is that if a defensive measure at one layer fails, there are additional layers behind it that serve ...

NIST's inability to keep up with record-setting levels of vulnerabilities by adding context such as severity scores and technical descriptions became acute starting in February 2024, when a contract ...

The National Institute of Standards and Technology (NIST) has awarded a contract for an unnamed company/organization to help them process incoming Common Vulnerabilities and Exposures (CVEs) for ...

The National Institute of Standards and Technology is looking to augment its central repository of digital vulnerabilities with help from artificial intelligence. In a new Request for Information ...

The recent conspicuous faltering of the National Vulnerability Database (NVD) is “based on a variety of factors, including an increase in software and, therefore, vulnerabilities, as well as a change ...

It’s now official: the US National Institute of Standards and Technology (NIST) will unveil an industry consortium to help it run the world’s most widely used software vulnerability repository. NIST, ...

After warning it can't keep up with the exploding number of bugs being submitted to the National Vulnerability Database (NVD), the National Institute of Science and Technology (NIST) has asked for ...

Modern vulnerability management programs require a strategy that defines what success means for your organization’s cybersecurity goals. By incorporating a few simple cyber hygiene routines to your ...

The National Institute of Standards and Technology (NIST) on May 24, released the final guideline version on how agencies should manage their vulnerability disclosure for information systems within ...

BU Information Security (InfoSec) is charged with helping to protect the University’s data. Vulnerability Management is a process of identifying, evaluating, and mitigating security weaknesses in ...