Apache

NIST Limits CVE Enrichment After 263% Surge in Vulnerability Submissions NIST has announced a significant shift in how it handles the National Vulnerability Database, stating it will now only automatically enrich CVEs that meet specific prioritization criteria — namely those appearing in CISA's Known Exploited Vulnerabilities catalog, those affecting software used within the federal government, and those covering critical software as defined under Executive Order 14028. The change, which went into effect April 15, was…