Storm Watch | Cyber Podcast | CVE Chaos: The Fragmented Future of Vulnerability Tracking, Bad Bots & Real-Time Threat Intel
Summary: This GreyNoise podcast episode describes a fragmenting vulnerability tracking landscape: the MITRE-run CVE program faces funding uncertainty and a possible move to nonprofit status, ENISA is rolling out an EU Vulnerability Database, China runs its own state-mandated systems, and NVD has placed tens of thousands of older vulnerabilities in a "Deferred" status. It also cites Imperva's 2024 Bad Bot Report finding that nearly a third of all internet traffic last year came from malicious bots, and notes GreyNoise's new Global Observation Grid of thousands of sensors in over 80 countries.
What you should know: With NVD deferring tens of thousands of vulnerabilities and attackers exploiting flaws within hours of disclosure, teams relying on a single official feed are working from a picture that is already behind. Nearly a third of internet traffic coming from malicious bots means the account takeover and scraping pressure on retail and entertainment sectors is no longer an edge case.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026