Following quotes are from your own article. IBM did not called them slow or lazy. IBM blamed lack of resources and claimed more resources will improve things. I

Following quotes are from your own article. IBM did not called them slow or lazy. IBM blamed lack of resources and claimed more resources will improve things. IBM did NOT claimed that current resources are being used ineffectively. > Budget cuts are partially responsible for CVE analysis issues. As noted by Security Magazine, NIST funding was cut by 12% this year, making it more difficult for the agency to enrich CVEs. In practice, the NVD is effectively a downstream consumer of CVE data — while the number of CVEs found and reported remains steady, NIST’s ability to assess and enrich these vulnerabilities has been significantly reduced. > The sheer number of reported vulnerabilities also poses a problem for analysis efforts; Flashpoint research found that NIST reported 33,137 vulnerabilities in 2023. . In part, rising numbers are tied to improved detection capabilities.