Inspector general finds NIST mistakes have made vulnerability database ineffective
2026-06-02T02:51:53Z•1d70eae321159f137343c914bd16e4980bb55eaed82d1daaefe0e768d3ce06fd
AfghanistanMicrosoftNISTNSANVDPakistan-linkedRussiaSideCopybacklogcyberespionageinspector-generalleadershipmaritime-universitiessecurity-researchthreat-actorsvulnerability-databasevulnerability-disclosurevulnerability-managementzero-day
What happened
A set of reports highlights systemic and geopolitical cyber issues: an inspector general found NIST’s National Vulnerability Database backlog grew from ~13,000 unprocessed entries in Feb 2024 to over 27,000 by end of 2025, degrading the NVD’s effectiveness and public trust; the NSA named new senior cyber leaders; Microsoft publicly pledged not to pursue security researchers after backlash over zero-day handling; researchers attributed a Pakistan-linked cyberespionage campaign (against Afghanistan’s Ministry of Finance and provincial officials) and an extended campaign by an unknown group that,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- therecord_media
- Record identifier
- 1d70eae321159f137343c914bd16e4980bb55eaed82d1daaefe0e768d3ce06fd
- Enrichment time
- 2026-06-02T02:51:53Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.