CISA to allow researchers to report vulnerabilities to exploited bugs catalog

A batch of cybersecurity developments: CISA launched a nomination form enabling researchers, vendors and partners to report bugs for inclusion in its Known Exploited Vulnerabilities (KEV) catalog. UK proposals to reform cybercrime law could severely restrict security research by forcing researchers to stop activity as soon as a vulnerability is found, raising concerns about disclosure and exploitability assessments. European authorities dismantled First VPN, a service marketed on Russian-speaking forums that helped criminals hide ransomware and other attacks. Two U.S. residents pleaded guilty—