Inspector general finds NIST mistakes have made vulnerability database ineffective
2026-06-02T08:51:58Z•7c66ca8e5db97319b76a4a66d262a14292e52f9136ca5b39be60653d304afc66
afghanistancyberespionagecybersecurity-collaboration-centerinspector-generalleadership-changemaritime-universitiesmicrosoftnistnsanvdpakistan-linkedrussiasecurity-researcherstargeted-educationunknown-actorvulnerability-backlogvulnerability-disclosurevulnerability-managementzero-day
What happened
A batch of cybersecurity news: an inspector general found NIST’s National Vulnerability Database (NVD) backlog grew from ~13,000 unprocessed vulnerabilities in Feb 2024 to more than 27,000 by end of 2025, degrading the NVD’s utility and public trust; the NSA appointed David Imbordino as its new chief and Bruce Jones to lead the Cybersecurity Collaboration Center; Microsoft said it will not pursue legal action against security researchers after backlash over zero-day handling; researchers attributed a new cyberespionage campaign targeting Afghanistan’s Ministry of Finance and provincial finance
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- therecord_media
- Record identifier
- 7c66ca8e5db97319b76a4a66d262a14292e52f9136ca5b39be60653d304afc66
- Enrichment time
- 2026-06-02T08:51:58Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.