How NIST's Cutback of CVE Handling Impacts Cyber Teams

This DarkReading digest highlights shifts in vulnerability management and rising operational threats: NIST is changing how it handles CVE data and prioritizing high‑impact flaws, prompting industry coalitions to fill enrichment gaps. Active, high‑impact issues include an exploited Adobe zero‑day, a critical nginx MCP integration flaw, and multiple Microsoft elevation‑of‑privilege bugs (including two zero‑days) — all stressing remediation capacity. Threat actor trends include device‑code phishing to bypass 2FA, North Korean ClickFix targeting macOS, APT41 cloud‑credential harvesting with typosq