NIST NVD Enrichment Policy Change: Prioritizing Vulnerabilities with Attacker Behavior Signals

Recorded Future outlines concerns about NIST/NVD narrowing CVE enrichment coverage and explains its alternative, attacker-centric Vulnerability Intelligence approach: prioritizing signals such as observed exploitation, verified proof-of-concept code, malware/ransomware associations, and analyst-validated reporting instead of depending solely on NVD CVSS scores to drive patch prioritization.