Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

News & Updates

Stay informed as the Information Technology Laboratory’s Cybersecurity and Privacy Program releases publications, schedules virtual and in-person events, and announces other important developments.

Subscribe to our email updates.

Visit these additional NIST sites to learn more about:

  • NVD: National Vulnerability Database news and status updates
  • NICE: National Initiative for Cybersecurity Education news and events
  • NCCoE: National Cybersecurity Center of Excellence news and events
  • NIST-wide cybersecurity and privacy news and events
 
Showing 9 matching records.
NIST Releases Two Updated SCAP Publications
June 8, 2026

NIST announces the release of Special Publication (SP) 800-126r4 (Revision 4), Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.4, and SP 800-126Ar4, SCAP 1.4 Component Specification Version Updates: An Annex to NIST SP 800-126r4.

Secure Deployment of RESTful Web APIs
May 18, 2026

The initial public draft of NIST Special Publication (SP) 800-228A is available for public comment. The comment period is oopen through July 2, 2026.

Final NIST SP 800-70r5 is available
May 8, 2026

The final version of NIST Special Publication (SP) 800-70r5 (Revision 5), National Checklist Program for IT Products – Guidelines for Checklist Users and Developers, is now available.

Draft SSDF 1.2 Available for Comment
December 17, 2025

NIST has released the initial public draft of Special Publication (SP) 800-218r1 (Revision 1), Secure Software Development Framework (SSDF) Version 1.2: Recommendations for Mitigating the Risk of Software Vulnerabilities, per Executive Order 14306.

NIST Releases SP 800-126 & SP 800-126A
December 11, 2025

NIST Releases Two Updated Security Content Automation Protocol (SCAP)  Publications for Comment

Draft SP 800-70 Rev 5 is available for comment
December 9, 2025

NIST Special Publication (SP) 800-70r5 ipd (Revision 5, initial public draft), National Checklist Program for IT Products – Guidelines for Checklist Users and Developers, is now available for public comment through January 16, 2026, at 11:59 PM (EST).

IoT Device Network Behavior: NIST IR 8349
August 28, 2025

NIST’s National Cybersecurity Center of Excellence (NCCoE) has published NIST Internal Report (NIST IR) 8349: Methodology for Characterizing Network Behavior of Internet of Things Devices.

NIST Cybersecurity White Paper 45
June 5, 2025

Metrics and Methodology for Hardware Security Constructs utilizes a comprehensive methodology and two key metrics to analyze different hardware weaknesses and the specific attack patterns that can exploit them.

NIST Publishes Cybersecurity White Paper 41
May 19, 2025

NIST Cybersecurity White Paper (CSWP) 41, "Likely Exploited Vulnerabilities: A Proposed Metric for Vulnerability Exploitation Probability", helps organizations identify actively exploited vulnerabilities and measure prioritization after patching.