# CISA decides weekly vulnerability bulletin isn't necessary anymore

DevFeed: [CISA decides weekly vulnerability bulletin isn't necessary anymore](<https://devfeed.tech/articles/cisa-decides-weekly-vulnerability-bulletin-isn-t-necessary-anymore-31539.md>)

Original publisher: [Read original article](<https://www.theregister.com/security/2026/09/16/cisa-decides-weekly-vulnerability-bulletin-isnt-necessary-anymore/5296968>)

Author: Brandon Vigliarolo

Published: 2026-09-16T20:33:48Z

Content type: article

Language: en

Sources: [www.theregister.com - Articles](<https://devfeed.tech/sources/www-theregister-com-articles.md>)

Topics: [cisa](<https://devfeed.tech/topics/cisa.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [cisa](<https://devfeed.tech/tags/cisa.md>), [common-vulnerability-scoring-system](<https://devfeed.tech/tags/common-vulnerability-scoring-system.md>), [infosec](<https://devfeed.tech/tags/infosec.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

CISA is ending its weekly vulnerability bulletin on September 28, shifting from static CVSS scores to risk-based prioritization.

## Source excerpt

Agency's shift from static CVSS scores to risk-based prioritization sends the old format packing September 28