The increasing use of artificial intelligence (AI) to generate reports has resulted in a significant rise in fake vulnerabilities being submitted to the Common Vulnerabilities and Exposures (CVE) pipeline. This has led to a substantial backlog of reports that the National Institute of Standards and Technology (NIST) is struggling to clear.
Key Insights
AI-generated reports are polluting the CVE pipeline with fake vulnerabilities, NIST is struggling to clear its backlog of reports, and the influx of bogus reports is expected to continue, further exacerbating the existing challenges in vulnerability management and cybersecurity.
