NIST STOPS RATING LOW-PRIORITY SECURITY FLAWS

INDUSTRY DESK■ 1 MIN READ

SUN, APR 19, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

The National Institute of Standards and Technology will cease assigning severity scores to lower-priority vulnerabilities, citing mounting workload pressures from surging submission volumes.

NIST's decision reflects the agency's resource constraints as the vulnerability landscape expands. The organization will focus its rating efforts on higher-priority flaws while deprioritizing less critical issues. The move addresses a practical bottleneck: security researchers and vendors have increasingly submitted vulnerabilities for official severity assessment, outpacing NIST's capacity to evaluate them. By narrowing its scope, the agency aims to maintain quality and timeliness for critical vulnerability ratings. Organizations relying on NIST severity scores for lower-tier vulnerabilities may need alternative assessment methods or rely on vendor guidance. This shift could accelerate adoption of other vulnerability rating systems or internal assessment frameworks. The decision highlights ongoing challenges in vulnerability management infrastructure as cyber threats proliferate and disclosure practices evolve.

■ SOURCES

► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P543CARHARTT DATA BREACH EXPOSES 12.9M ACCOUNTS

The ShinyHunters extortion group has published sensitive data from nearly 13 million Carhartt customer accounts stolen earlier this month, according to data breach notification service Have I Been Pwned.

8H AGO— Security Desk

P541RUSSIAN HACKERS WEAPONIZED SPACEX AI TOOL

A Russian-speaking ransomware gang called Aur0ra exploited SpaceX's Cursor AI coding assistant to breach at least seven companies between mid-April and late May, according to security firm Gambit Security.

8H AGO— AI Desk

P530FLOCK CAMERA VIGILANTES ESCALATE DESTRUCTION

Americans are systematically targeting and disabling Flock Safety cameras across the country in a decentralized protest movement. The surveillance devices face everything from vandalism to theft as public opposition intensifies.

16H AGO— Industry Desk

P526US DISRUPTS CHINA-LINKED HACKER INFRASTRUCTURE

The US Justice Department has dismantled online infrastructure used by Chinese state-sponsored hackers targeting NASA, the Federal Reserve, and the Senate. The action represents a coordinated effort to disrupt cyber operations against American government agencies and critical infrastructure.

16H AGO— Security Desk

◄ BACK TO NEWS

NIST STOPS RATING LOW-PRIORITY SECURITY FLAWS

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF