Month: September 2026

You’re invited to join NIST on September 17, 2026 for an Information Technology Laboratory (ITL) AI Program hosted webinar on the development of an AI agent enrichment workflow at the National Vulnerability Database.  

• Workshop Title: Development of an AI Agent Enrichment Workflow at the National Vulnerability Database
• When: Thursday, September 17, 2026 | 11:00 am – 12:00 pm Eastern Time 
• Where: Virtual (Register) 

The National Vulnerability Database (NVD), established and operated by NIST, serves as the U.S. government repository of standards-based vulnerability management data. The NVD is a foundational resource for vulnerability management, software security, compliance automation, and cybersecurity risk analysis across the public and private sectors. It provides standardized vulnerability enrichment and associated metadata consumed by a broad ecosystem of security tools and operational workflows. It is a part of the broader vulnerability management ecosystem that encompasses processes, standards, and tools involved in one or more phases of the vulnerability lifecycle of identifying, validating, disclosing, disseminating, prioritizing, and remediating software and system vulnerabilities.

The increasing scale and complexity of discovered vulnerabilities poses a challenge for the NVD to provide timely information that is actionable to users of NVD data. The increasing use of AI tools to aid in the discovery and exploitation of vulnerabilities contributes even more to the job that is required to keep pace with the flow of publicly disclosed vulnerabilities.

To solve this, NIST has begun work on an AI agentic workflow to aid in the enrichment of vulnerability information provided by NVD. 

Join NIST to discuss the approach taken, the architecture of the solution, the various issues discovered during implementation, and early results with the use of the tool at the NVD.

Learn More and Register

Join the NIST National Cybersecurity Center of Excellence (NCCoE) on September 29, 2026 at 1:00 P.M. EDT for a webinar to further explore the newly available NIST Supply Chain Traceability and Manufacturing Meta-Framework!

You still have two weeks left to register for this event! Secure your spot today.

Background

The NCCoE is helping to advance supply chain traceability by addressing one of the greatest barriers to effective supply chain risk management: securely verifying product pedigree and provenance across complex, multi-tier supply chains. Earlier this month, the NCCoE published the finalized version of NIST IR 8536, Supply Chain Traceability Principles: A Manufacturing Meta-Framework.

The Meta-Framework introduced in this report details a practical, conceptual approach for organizing, linking, and querying traceability data across diverse manufacturing supply chain ecosystems.

This webinar will explore:

• The Traceability Challenge: An overview of the barriers to verifying product provenance across fragmented ecosystems, illustrated through a simplified discrete manufacturing supply chain use case example.
• Core Principles for SCRM Support: A review of the foundational traceability principles necessary to inform organizational Supply Chain Risk Management (SCRM) programs.
• Architectural Mechanics: How these foundational principles are operationalized within the Meta-Framework using structural data patterns (such as encapsulation and standardized interfaces) to establish a continuous, cross-sector provenance chain.
• Data Privacy and Verifiable Trust: The utilization of hash-based traceability links to securely exchange product history without requiring suppliers to expose sensitive intellectual property or internal trade secrets.

Register Today!

Reserve your virtual seat before it’s too late! Visit the NCCoE event page to learn more and register.Register Now!

NIST has published Special Publication (SP) 1352, Assessing Security Requirements for Controlled Unclassified Information (CUI): NIST SP 800-171Ar3 (Revision 3) Small Business Primer. This guide provides small business owners and operators with a high-level overview of SP 800-171Ar3, Assessing Security Requirements for Controlled Unclassified Information. The goal of the primer is to help the small business community understand foundational SP 800-171 assessment concepts and basic strategies for planning for an assessment.   

Who is this Guide For?  

This primer is for business leaders or employees who are tasked with managing the implementation of SP 800-171r3, including conducting self-assessments or preparing to work with external assessors.

View the Primer

Federal agencies that deploy an Open Radio Access Network (O-RAN) as part of their infrastructure must include that deployment in their risk management programs. This draft Cybersecurity Framework (CSF) 2.0 profile – NIST Interagency Report (IR) 8623 – describes how components that conform to the security specifications produced by the O-RAN ALLIANCE support various CSF 2.0 outcomes. It also includes references to O-RAN ALLIANCE-produced documents and other relevant guidelines that may help federal agency cybersecurity managers.

The public comment review period is open through November 2, 2026. See the publication details for a copy of the draft and instructions for submitting comments. Find additional information on the NIST Advanced Security Architectures for Next Generation Wireless project webpage.

Read More