CISA to allow researchers to report vulnerabilities to exploited bugs catalog

Multiple security and legal developments: CISA launched a nomination form allowing researchers, vendors, and partners to submit bugs for inclusion in the Known Exploited Vulnerabilities (KEV) catalog. The FBI warned about Kali365, a Telegram-based phishing-as-a-service that captures OAuth tokens to enable large-scale access to Microsoft 365 environments. Meta settled a school-district lawsuit alleging addictive product design harmed students’ mental health. The Supreme Court’s pending Chatrie decision on geofence searches could materially reshape privacy and law-enforcement search authorities.