<p>Agency's shift from static CVSS scores to risk-based prioritization sends the old format packing September 28</p>