NIST SAYS EXPLOITED BACKLOG CLEARED BUT END-OF-YEAR GOAL FOR FULL LIST UNLIKELY

Summary from the TLDR InfoSec newsletter

This past February, NIST announced that it did not have enough resources to keep up with the CVE enrichment backlog and stated that changes would be made to keep up. Now, the NIST has announced that it is fully staffed, has partnered with other federal agencies and industry partners, and has provided enriched CVE data for all vulnerabilities in the KEV. However, NIST also stated that the format that it receives data from its Authorized Data Provider is difficult to import and enhance.