NIST wants to overhaul its vulnerability database for the AI age
NIST issued a Federal Register RFI seeking public input on overhauling the National Vulnerability Database for AI-scale, machine-consumable security data.
NIST published a request for information arguing the National Vulnerability Database must adapt as LLMs increasingly find and exploit vulnerabilities at machine scale. The RFI seeks input on integrating automation into vulnerability reporting, faster dissemination to defenders, and transparency and auditability in AI-driven decisions. It follows the White House-backed Gold Eagle clearinghouse at Treasury and the VINCE program with Carnegie Mellon's Software Engineering Institute for AI-discovered vulnerability reports.
- RFI cites rising disclosure volume, inconsistent data quality and demand for near real-time enrichment.
- NIST asks how AI should support automated remediation and auditable decision-making.
- Effort follows Treasury's Gold Eagle clearinghouse and Carnegie Mellon SEI's VINCE for AI-discovered vulnerabilities.
- Countries
- United States
From the original article
3 min read at cyberscoop.com
NIST is seeking public input to modernize the National Vulnerability Database to keep pace with AI-driven cyber threats and machine-scale security data.
By @CyberScoopNews · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.