NIST STOPS RATING LOW-PRIORITY SECURITY FLAWS

INDUSTRY DESK■ 1 MIN READ

SUN, APR 19, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

The National Institute of Standards and Technology will cease assigning severity scores to lower-priority vulnerabilities, citing mounting workload pressures from surging submission volumes.

NIST's decision reflects the agency's resource constraints as the vulnerability landscape expands. The organization will focus its rating efforts on higher-priority flaws while deprioritizing less critical issues. The move addresses a practical bottleneck: security researchers and vendors have increasingly submitted vulnerabilities for official severity assessment, outpacing NIST's capacity to evaluate them. By narrowing its scope, the agency aims to maintain quality and timeliness for critical vulnerability ratings. Organizations relying on NIST severity scores for lower-tier vulnerabilities may need alternative assessment methods or rely on vendor guidance. This shift could accelerate adoption of other vulnerability rating systems or internal assessment frameworks. The decision highlights ongoing challenges in vulnerability management infrastructure as cyber threats proliferate and disclosure practices evolve.

■ SOURCES

► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P650CYBER-ATTACK BREACHES THOUSANDS OF PATIENT RECORDS IN AUSTRALIA

Partnered Health, one of Australia's largest healthcare providers, has disclosed a cyber-attack affecting 21 clinics across Sydney, Melbourne, and Canberra. Personal information and medical records were compromised in the breach.

1H AGO— Security Desk

P648AI SYSTEM AUTOMATICALLY DISCOVERS ZERO-DAY VULNERABILITIES

Security firm Intruder has developed an AI-powered system that automatically identifies previously unknown software vulnerabilities by combining code analysis with large language models. The tool already discovered and exploited a WordPress plugin zero-day.

1H AGO— AI Desk

P624US CHARGES THREE RUSSIANS FOR BULLETPROOF HOSTING

U.S. federal prosecutors have unsealed charges against three Russian nationals accused of operating a bulletproof hosting service that supported ransomware gangs responsible for over $62 million in damages worldwide.

6H AGO— Industry Desk

P620CISA ALERTS: SHAREPOINT FLAWS UNDER ACTIVE ATTACK

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises SharePoint Server instances. Organizations running affected versions must patch immediately.

6H AGO— Security Desk

◄ BACK TO NEWS

NIST STOPS RATING LOW-PRIORITY SECURITY FLAWS

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF