CISA's new 'vulnrichment' program aims to bolster the NVD

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has launched a new vulnerability enrichment program that aims to fill the gap that opened earlier this year when the National Institute of Standards and Technology (NIST) suddenly scaled down its involvement with the National Vulnerability Database (NVD).

Under the new "vulnrichment" program (on GitHub), CISA analysts will add Common Vulnerability Scoring System (CVSS) scores and other information. The CISA wrote about the new program on LinkedIn, noting:

"We …

agency bolster cisa cybersecurity database down gap infrastructure infrastructure security national national vulnerability database new vulnerability nist nvd program security standards technology under vulnerability vulnerability database