The US government is offering a new standard to determine the chances that a software or hardware flaw has been successfully targeted by a threat actor in the wild. The Department of Commerce's ...