Sustainable Security: NIST Abandons “Analyze Everything” Goal for NVD

NIST announced a major operational overhaul of the National Vulnerability Database: instead of enriching every submitted CVE, the agency will prioritize automatic enrichment for Known Exploited Vulnerabilities, government software, and critical software, label lower-priority items as “Not Scheduled,” reduce duplicate severity scoring, tighten re-analysis rules, and focus on automating workflows to manage a rapidly growing backlog.