NIST narrows scope of CVE analysis to keep up with rising tide of vulnerabilities

Collection of CyberScoop stories highlighting shifting national cyber priorities and active threats: NIST/NVD is narrowing CVE analysis to focus on critical, federal-used, and actively exploited vulnerabilities due to the growth of reported flaws; Microsoft released a large April patch batch including an actively exploited zero-day in Office SharePoint that allows disclosure and modification of information; Black Basta former affiliates have launched a fast-scale social engineering intrusion campaign; OpenAI expanded its Trusted Access for Cyber program with a GPT-5.4 Cyber model (raising who-