[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUNdO5JFtktO89vg1DmVPAGrV9Af9n-70qiG69G0Pg68":3},{"article":4,"iocs":54,"watch_terms":55,"solutions":56,"lesson":116},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"9c2b1050-352f-4047-a3ae-4aeae359d925","NATO and an AI startup can now name and track software vulnerabilities","nato-and-an-ai-startup-can-now-name-and-track-software-vulnerabilities-e34f3c","NATO’s cyber defense arm and a startup that uses artificial intelligence to find software flaws can now issue the ID numbers the industry uses to track those flaws, the European Union Agency for Cybersecurity announced last week. The NATO Cyber Security Centre, part of the NATO Communications and Information Agency, and AISLE, a cybersecurity company […] The post NATO and an AI startup can now name and track software vulnerabilities appeared first on CyberScoop.","NATO's Cyber Security Centre and AI-powered vulnerability discovery startup AISLE have been authorized as CVE Numbering Authorities (CNAs) under the European Union Agency for Cybersecurity (ENISA). This expansion aims to create a more globally representative and scalable system for identifying and tracking software vulnerabilities, especially with the rise of AI in vulnerability discovery. NATO can now assign CVE IDs across its enterprise, while AISLE's authorization is initially limited to its own products.","NATO and AI startup AISLE become CVE Numbering Authorities under ENISA.","https:\u002F\u002Fcyberscoop.com\u002Fnato-aisle-enisa-cve-vulnerability-tracking\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2026\u002F08\u002FGettyImages-2212031306-2.jpg","2026-08-10T19:50:44+00:00","2026-08-10T20:00:19.313194+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"AISLE","product",{"name":21,"type":22},"artificial intelligence","technology",{"name":24,"type":22},"CVE",{"name":26,"type":19},"OpenSSL",{"name":28,"type":19},"Linux",{"name":30,"type":19},"Apache","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,39,44,49],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,26,28],{"controls":57,"vendors":115},[58,87],{"slug":59,"name":60,"problem":61,"products":62},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":53,"name":88,"problem":89,"products":90},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[91,99,107],{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"reliaquest","ReliaQuest","\u002Fvendor-logos\u002Freliaquest.png","greymatter-digital-risk-protection","GreyMatter Digital Risk Protection","https:\u002F\u002Freliaquest.com\u002Fsecurity-operations-platform\u002Fdark-web-and-digital-risk-protection\u002F","Watches the open, deep and dark web for threats aimed at an organisation and alerts its security team in real time.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",[],{"slug":117,"title":118,"body":119,"framework_refs":120,"framework_notes":129},"nato-and-ai-startup-gain-authority-to-assign-cve-ids-expanding-global-vulnerability-tracking","NATO and AI Startup Gain Authority to Assign CVE IDs, Expanding Global Vulnerability Tracking","The authorization of NATO's Cyber Security Centre and AI startup AISLE as CVE Numbering Authorities (CNAs) under ENISA marks a significant expansion of the global vulnerability disclosure ecosystem. Historically, the CVE program has been dominated by a limited number of organizations, creating bottlenecks in timely vulnerability identification and publication. As AI-powered tools accelerate the discovery of new vulnerabilities, the infrastructure for naming and tracking them must scale proportionally. Without a globally representative and well-governed CNA network, critical vulnerabilities risk being unnamed, untracked, or inconsistently disclosed — leaving defenders without the shared language needed to prioritize remediation. This development underscores the importance of investing in structured vulnerability governance frameworks at both the enterprise and national level.",[121,122,123,124,125,126,127,128],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-40: Guide to Enterprise Patch Management Planning","NIST CSF ID.RA-1: Asset vulnerabilities are identified and documented","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","ISO\u002FIEC 29147: Vulnerability Disclosure","ISO\u002FIEC 30111: Vulnerability Handling Processes","ENISA Good Practice Guide on Vulnerability Disclosure","EU NIS2 Directive Article 21: Security of Network and Information Systems",{}]