CISA Seeks Formal CVE Integration for AI Firms (infosecurity-magazine.com)

• CISA pushing for AI firms to adopt standardized CVE disclosure protocols.
• Increased focus on long-term security in AI-integrated infrastructure.
• Requirement for systemic vulnerability transparency in AI development cycles.

"CISA's vulnerability management lead, Lindsey Cerkovnik, announced at VulnCon that AI developers must take a more active role in the CVE program. As AI models become integral to critical infrastructure, the agency aims to standardize vulnerability disclosure practices for AI companies. This shift represents a transition from voluntary industry cooperation to a formal, structured approach for managing security flaws within the AI ecosystem to bolster national resilience against cyber threats."