NATO and an AI startup can now name and track software vulnerabilities
NATO and AI startup AISLE become CVE Numbering Authorities under ENISA.
NATO's Cyber Security Centre and AI-powered vulnerability discovery startup AISLE have been authorized as CVE Numbering Authorities (CNAs) under the European Union Agency for Cybersecurity (ENISA). This expansion aims to create a more globally representative and scalable system for identifying and tracking software vulnerabilities, especially with the rise of AI in vulnerability discovery. NATO can now assign CVE IDs across its enterprise, while AISLE's authorization is initially limited to its own products.
AI summary of the linked source. Not reviewed by an editor. How this works
Run AISLE?
Get an email when a new story names AISLE, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe authorization of NATO's Cyber Security Centre and AI startup AISLE as CVE Numbering Authorities (CNAs) under ENISA marks a significant expansion of the global vulnerability disclosure ecosystem. Historically, the CVE program has been dominated by a limited number of organizations, creating bottlenecks in timely vulnerability identification and publication. As AI-powered tools accelerate the discovery of new vulnerabilities, the infrastructure for naming and tracking them must scale proportionally. Without a globally representative and well-governed CNA network, critical vulnerabilities risk being unnamed, untracked, or inconsistently disclosed — leaving defenders without the shared language needed to prioritize remediation. This development underscores the importance of investing in structured vulnerability governance frameworks at both the enterprise and national level.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.