Most Vulnerabilities Discussed Online or on Dark Web Before NVD Publication

Discovered vulnerabilities are most often first reported over news sites, blogs, social media pages and the dark web, or paste sites, before being published in NIST's National Vulnerability Database (NVD). 

Reporting vulnerabilities is essential for everyone's online security, and this is something that often happens with most companies - researchers dig deep, find something that's not right, exploit it, and report it to the company so they can fix it. This scenarios makes us all safer when browsing the Internet, using apps and tools. 

Threat intel firm Recorded Future, however, has noticed that a lot of these vulnerabilities are first discussed online before even being reported or making it into the NVD. 

"The disparity between the unofficial and official communication of CVEs is placing a greater onus on CISOs and security teams, leaving them unknowingly open to potential exploits and u...