NVD shifts strategy to deal with a CVE backlog.

This bulletin summarizes recent cybersecurity developments: NVD will adopt risk-based prioritization due to a CVE backlog; the US House briefly extended FISA Section 702 and CISA recalled furloughed staff amid funding issues; Darktrace warns of an OT-targeted malware 'ZionSiphon' aimed at Israeli water treatment/desalination systems with apparent destructive intent; US and Indonesian law enforcement shut down the W3LL phishing platform linked to over $20M in stolen funds; and Microsoft, Adobe, Fortinet and multiple ICS vendors issued patches, including two zero-days (one actively exploited).