#vulnerability-management
7 articles
This archive collects 19 articles tagged vulnerability-management published between April 12, 2026 and May 14, 2026, giving security teams a focused view of how this topic has appeared across ZCyberNews coverage. Observed actor references include Interlock, presented only where the underlying article metadata supports the attribution. The affected-scope signals emphasize financial services, government, and healthcare across Global, EU, and North america, helping readers compare exposure patterns without adding claims beyond the archive data. Severity coverage includes 1 critical, 7 high, 4 medium, and 7 informational reports.
MEDIUMNIST NVD Enrichment Change Creates CVSS Gap for 80% of CVEs
NIST now enriches only 15-20% of CVEs under new policy as of April 2026, leaving 80% without CVSS scores or product mappings.
INFORMATIONALNIST Abandons Comprehensive NVD Analysis for Risk-Based Prioritization
NIST will no longer analyze all 263,000+ annual CVE submissions, shifting to a risk-based model to prioritize high-impact flaws as submissions surge 263% since 2020.
HIGHAI-Powered Vulnerability Discovery Accelerates Exploit Timelines, Strains
Qualys warns that AI agents like Claude Mythos can cut vulnerability discovery time from months to hours, compressing the patch window and overwhelming security teams with a surge of new CVEs.
HIGHCloud Security Alliance Warns of AI Vulnerability Storm Post-Mythos
The Cloud Security Alliance warns that Anthropic's Claude Mythos model will trigger an 'AI vulnerability storm,' forcing CISOs to manage a 10x surge in code flaws and novel exploit techniques within 18 months.
CRITICALInterlock Ransomware Exploits Cisco FMC Zero-Day in Global Attacks
The Interlock ransomware group is actively exploiting a zero-day vulnerability in Cisco Firepower Management Center to breach networks. Recorded Future identified 31 high-impact flaws in March 2026, a 139% monthly increase.
INFORMATIONALNIST Limits CVE Enrichment Amid Overwhelming Surge in Submissions
NIST will no longer fully analyze all CVEs submitted to the National Vulnerability Database, citing a 263% increase in submissions that has overwhelmed its enrichment process, leaving security teams with less context.
INFORMATIONALNIST Overhauls National Vulnerability Database, Prioritizes High-Risk CVE
NIST will cease comprehensive analysis for all CVEs, shifting to enrich only the highest-risk vulnerabilities due to a 263% surge in submissions, fundamentally altering how the security community uses the NVD.
Stay Updated
Get the latest cybersecurity news delivered to your inbox.