NIST proposes overhaul of vulnerability database for the AI age

The National Institute for Standards and Technology announced a comprehensive review of its National Vulnerability Database, recognizing that current processes are inadequate for a cybersecurity landscape increasingly shaped by artificial intelligence. NIST expressed concerns that as large language models become more capable of finding and exploiting vulnerabilities at scale, the database must adapt to handle increased volume and complexity of disclosures. The agency is seeking public input on integrating automation into the vulnerability reporting process, improving information dissemination speed, and building transparency into AI-driven decision-making for better coordination between security researchers and defenders.