CISA to allow researchers to report vulnerabilities to exploited bugs catalog

This collection of items covers multiple security and privacy developments: CISA launched a nomination form to allow researchers, vendors, and partners to request additions to its Known Exploited Vulnerabilities (KEV) catalog; the FBI warned of Kali365, a Telegram-based phishing-as-a-service that captures OAuth tokens to gain broad Microsoft 365 access; Meta settled a school-district lawsuit alleging addictive product design harmed student mental health; the Supreme Court's upcoming Chatrie decision may change legal standards around geofence searches and privacy; and Canadian Jacob Butler was/