CISA Kills Its Own Weekly Vulnerability Bulletin on Sept 28: The CVSS-Ranked List Is Dead, Risk Wins
The weekly 'top vulnerabilities by CVSS' email goes dark Monday. CISA's replacement signal chain is KEV + advisories + CVE.org — and BOD 26-04 replaces severity scores with a four-variable risk model your patch routine can run on too.