With 2025’s funding issues underlining key issues with the CVE system, what should businesses be doing to source intelligence about security vulnerabilities?