Curated security research, vulnerabilities, advisories and tools for practitioners.

#nist

Security coverage tagged nist.

1.

The CVE spike across major software companies is a remediation problem

blog | 2026-09-10 00:00 | aikido.dev | original ↗ | #ai-security | #cloud | #vulnerability-management

2.

How fuzz testing can help secure the public sector and strengthen compliance

blog | 2026-06-10 12:00 | bugcrowd.com | original ↗ | #vulnerability-research | #continuous-testing | #compliance

3.

NIST Control Families: A Practical Reference for Security Teams

blog | 2026-06-02 07:00 | bugbunny.ai | original ↗ | #vulnerability-management | #compliance | #nist

4.

NIST NVD Update: What it Means For Vulnerability Management

blog | 2026-04-27 10:33 | wiz.io | original ↗ | #vulnerability-management | #cve | #nist

5.

Understanding the CVE Ecosystem and NIST’s Changing Role

blog | 2026-04-22 00:00 | bishopfox.com | original ↗ | #vulnerability-management | #remediation | #risk-management

6.

Bugcrowd’s FedRAMP authorization: Frequently asked questions

blog | 2026-03-03 13:44 | bugcrowd.com | original ↗ | #bug-bounty | #cisa | #compliance

7.

I, Robot + NIST AI RMF = Complete Guide on Preventing Robot Rebellion

blog | 2025-08-08 00:00 | netlas.io | original ↗ | #ai-security | #risk-management | #nist

8.

Password Policy GPO

research | 2025-07-07 05:25 | projectblack.io | original ↗ | #active-directory | #nist | #hardening

9.

Cloud Security Assessment: How to Evaluate Your Cloud Posture

blog | 2025-04-30 00:00 | aikido.dev | original ↗ | #cloud | #cloud-security | #automation

10.

Finding bugs in implementations of HQC, the fifth post-quantum standard

research | 2025-03-20 23:00 | CVE-2024-54137 | blog.quarkslab.com | original ↗ | #cryptography | #post-quantum | #nist

11.

US House passes bill mandating vulnerability disclosure policies for federal contractors

vulnerability | 2025-03-11 13:33 | yeswehack.com | original ↗ | #cisa | #vdp | #vulnerability-disclosure

12.

Container Security - The Dev Guide

blog | 2025-01-15 00:00 | aikido.dev | original ↗ | #devsecops | #container-security | #ci-cd

13.

Formally Verified Post-Quantum Algorithms

blog | 2024-08-19 00:00 | bughunters.google.com | original ↗ | #cryptography | #post-quantum | #nist

14.

We wrote the code, and the code won

blog | 2024-08-15 11:50 | blog.trailofbits.com | original ↗ | #rust | #post-quantum-cryptography | #nist

15.

Are You Ready for the New NIST Control Around Public Disclosure Programs?

blog | 2024-07-25 16:00 | hackerone.com | original ↗ | #compliance | #vdp | #vulnerability-disclosure

16.

Quantum is unimportant to post-quantum

blog | 2024-07-01 13:00 | blog.trailofbits.com | original ↗ | #cryptography | #post-quantum | #nist

17.

NIST CSF 2.0 and Pentesting: What You Need to Know

blog | 2024-06-05 16:00 | hackerone.com | original ↗ | #pentesting | #compliance | #risk-management

18.

Status of post-quantum cryptography implementation

research | 2021-12-06 23:00 | blog.quarkslab.com | original ↗ | #cryptography | #post-quantum | #nist

19.

Semperis Contributes to Two NIST Data Integrity Practice Guides

incident | 2021-02-12 16:35 | semperis.com | original ↗ | #ransomware | #detection | #nist

20.

US Government Mandates Vulnerability Disclosure for IoT

vulnerability | 2020-11-23 20:25 | hackerone.com | original ↗ | #iot | #vdp | #vulnerability-disclosure

21.

The Stakes Are Higher in Healthcare: Fighting Cybercrime During a Pandemic

incident | 2020-11-18 22:08 | semperis.com | original ↗ | #ransomware | #nist | #zero-trust

22.

NIST Overhauls “Security and Privacy Controls” and Emphasizes VDP as a Best Practice

blog | 2020-11-03 00:30 | hackerone.com | original ↗ | #compliance | #vdp | #vulnerability-disclosure

23.

NIST SP 800-53 R5 adds Vulnerability Disclosure Programs to Federal Security and Privacy Controls

vulnerability | 2020-10-07 00:00 | bugcrowd.com | original ↗ | #compliance | #vdp | #vulnerability-disclosure

24.

What’s a Vulnerability Disclosure Program?

vulnerability | 2019-07-01 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #bugcrowd | #vdp

25.

Password Security: The Good, the Bad, and the "Never Should Have Happened"

blog | 2018-08-16 00:00 | bishopfox.com | original ↗ | #authentication | #best-practices | #nist

26.

NIST: Vulnerability Disclosure as a Requirement for Every Organization

vulnerability | 2018-01-18 00:00 | bugcrowd.com | original ↗ | #bug-bounty | #vulnerability-disclosure | #policy

27.

What the Newly Drafted NIST Password Guidelines Mean to You

blog | 2017-05-30 00:00 | bishopfox.com | original ↗ | #authentication | #nist | #mfa

28.

NIST joins Microsoft in Changing How We Should Think About Passwords

blog | 2016-09-05 14:19 | semperis.com | original ↗ | #microsoft | #authentication | #nist