The NIST standards show that with one year of progress behind us, there are five years of opportunity ahead.

OpenAI and Anthropic said they turned over their models to government researchers, who found an array of previously undiscovered vulnerabilities and attack techniques.

Good, bad, puzzling — a March order and June order could have bigger ripples than realized when the president signed them.

The CVE program publishes standardized information about known cyber vulnerabilities, while the NVD is a storehouse for vulnerability management data.

Congress and federal agencies can take some simple steps to better protect open-source software.

Sens. Warner and Lankford reintroduced their VDP bill after a companion version passed the House in March.

Cryptography experts said a “Cambrian explosion” of standards is on its way as a response to worries over quantum computers breaking current algorithms.

While the last-minute extension averts an immediate lapse in support, rival organizations are being stood up to supplant the global vulnerability system. 

Exploited vulnerabilities have turned up in Ivanti products 16 times since 2024. That’s more than any other vendor in the network edge device space.

The Common Vulnerability Scoring System has a lot of critics, but experts say it’s still the best unified way to share the severity of cybersecurity flaws.