Calm public-source cyber briefs for operators: KEV refreshes, exploited-vuln awareness, and practical checks on systems you own