Amid AI-Driven Bug Tsunami, NIST Looks to…AI

The National Institute of Standards and Technology (NIST) is seeking public input on how to modernize the National Vulnerability Database (NVD) in light of a massive surge in software vulnerabilities, driven in part by AI-powered research. The agency is grappling with a backlog of vulnerabilities and wants to determine the appropriate role for AI in improving vulnerability prioritization, enrichment, and remediation – while emphasizing the need for human verification to maintain trust in the data. The goal is to move beyond simply tracking vulnerabilities to providing richer context and actionable intelligence for defenders.